The breach happened in the middle of 2024 and they only let customers know in the middle of 2025?
I also don't see how anyone could trust their statement of that they "are not aware" of any misuse of the breached information, or any situations that may have arisen as a result (since no one knew about the situation except for the company since 2024. A lot of damage can be done with a drivers license number and all of the other personal details leaked.
Another lesson not to trust intermediaries. I'm not sure why people use Bitcoin ATM's since they charge exorbitant fees of 5 - 20%+, though I suppose here's another reason not to use them :
According to the email they sent,
Unfortunately, we were not able to inform you sooner due to an ongoing investigation. Federal law enforcement requested that Bitcoin Depot wait to provide you notice until after they completed the investigation. Law enforcement advised Bitcoin Depot on June 13, 2025, that their investigation was complete.
So it took the FBI a year to finished and conclude their investigation.
What's scary though is the number of individuals that are affected:
26,732And the obvious data that they got:
- Full name
- Phone number
- Driver’s license number
- Address
- Date of birth
- Email address
I suppose it would have allowed the FBI to see how and where the information was used, though at the cost of the 26,000+ customers, as who knows what kind of fraud or harm may have taken place and what could have been prevented if they were notified right away.