Bitcoin depot, an operator of bitcoin ATM, is informing customers of a data breech event that has highlighted their sensitive information.
In a letter sent to the affected persons, the company informed that it had first detected suspicious activity on its network last year on 23 June.
Although the internal investigation was completed on July 18, 2024, a parallel investigation by federal agencies decided that the public disclosure of the incident should be stopped until it is completed.
“On July 18, 2024, the investigation was completed, and we identified our personal information, which lies within the documents related to our customers that have been received by the unauthorized person,” Bitcoin depot in the letter,
“Unfortunately, we could not inform you soon due to the ongoing investigation. Federal Law Enforcement requested that Bitcoin depot wait to provide you a notice until after completing the investigation.”
The data exposed in this incident is separated from the person and can be involved:
- Full name
- Phone number
- Driver license number
- Address
- Date of birth
- email address
Bitcoin depot is one of the largest bitcoin ATM networks in the United States, operating 8,800 machines in the US, Canada and Australia.
Inf
There is a number of people exposed in this incident About 27,000 estimates,
Because financial risk belongs to cryptocurrency, letters recipients were not offered coverage through identity monitoring and theft security services.
Instead, they are advised to maintain high vigilance for signs of fraud, monitor their account statements, and consider keeping a security freeze on their credit report.
In December 2024, a similar incident occurred at the US bitcoin ATM operator byte Federal, which revealed the data breech affecting 58,000 customers.
In that case, a server hosting was caused by the hackers who exploited a gitlab vulnerability by the breech hackers, due to reaching sensitive customer information.
Bleepingcomputer contacted the Bitcoin depot about the security incident, but a comment was not avialble.
While cloud attacks can be more sophisticated, the attackers still succeed with surprisingly simple techniques.
Drawing by the detection of Vij in thousands of organizations, this report reveals the 8 major techniques used by Claude-Floid danger actors.
