Bitcoin Depot Inc. (NASDAQ: BTM) disclosed that unauthorized actors accessed its information technology systems on March 23, 2026, and transferred approximately 50.903 Bitcoin valued at $3.7 million from company-controlled wallets.

The company activated incident response protocols upon detection, engaged external cybersecurity experts, and notified law enforcement. The unauthorized party obtained control of credentials associated with Bitcoin Depot's digital asset settlement accounts, according to the company's statement.

Bitcoin Depot said the incident was contained to its corporate environment and did not affect customer platforms, divisions, systems, data or environments. The company has not identified evidence that customer personally identifiable information was accessed during the breach.

The company determined on April 6, 2026, that the incident is material due to potential consequences including reputational harm and legal, regulatory and response costs. Bitcoin Depot recorded a preliminary loss estimate of $3.7 million, representing the fair value of the transferred Bitcoin as of the incident date.

Bitcoin Depot maintains insurance coverage that may cover certain losses associated with cybersecurity incidents, though the company noted there is no assurance such coverage will be sufficient to recover losses from this incident.

The investigation remains ongoing with assistance from third-party specialists. The company is working with cybersecurity experts to reinforce its information technology systems and prevent future unauthorized access.

Bitcoin Depot stated the incident has not had a material impact on its operations as of the filing date and believes it is not reasonably likely to materially impact the company's financial condition or results of operations.