Bitcoin ATM operator suffers data breach

Bitcoin ATM data breach overview: 

• Who: Bitcoin ATM operator Byte Federal disclosed it suffered a September data breach that affected 58,000 consumers. 
• Why: Byte Federal says a bad actor obtained unauthorized access after exploiting a vulnerability in GitLab, a third-party software platform. 
• Where: Byte Federal operates a large network of Bitcoin ATMs in the United States.

Bitcoin ATM operator Byte Federal disclosed it suffered a data breach that affected 58,000 consumers. 

The data breach occurred Sept. 30, 2024, and Byte Federal discovered it Nov. 18, 2024, according to a data breach notice filed with Maine’s attorney general. 

Byte Federal attributed the data breach to a bad actor gaining unauthorized access to one of its servers by exploiting a vulnerability in GitLab, a third-party software platform, according to the recall notice. 

The company says the breach did not compromise user funds or assets and there is no evidence any personal information was actually compromised or misused in any manner.

Consumers potentially affected by the data breach should reset their login credentials and place a fraud alert or security freeze on their Byte Federal account with the major credit reporting agencies, the recall notice states.

Byte Federal says it immediately shut down its platform, isolated the bad actor and secured the compromised server upon discovering the Bitcoin ATM data breach. 

Byte Federal taking precautionary measures to ensure data security, notice says

The bad actor attempted to gain unauthorized access to personal information, including names, birth dates, addresses, phone numbers, email addresses, government-issued IDs, Social Security numbers, transaction activities and photographs of users, according to Byte Federal.

Byte Federal is taking precautionary measures to ensure the security of its users’ data and “help alleviate any concerns” in the wake of the incident, according to the data breach notice.

The company says it is also working with an independent cybersecurity team to conduct a forensic investigation to determine the cause and scope of the Bitcoin ATM data breach. 

“This investigation is ongoing, and we continue to cooperate with law enforcement in this regard,” Byte Federal says in the data breach notice. 

Consumers affected by the data breach who require further assistance can contact Byte Federal by email or phone at 786-686-2983 and can view ongoing updates from the investigation on the company’s website. 

In other recent data breach news, Fidelity, Cisco, Internet Archive and Radisson all recently confirmed they were investigating or reported suffering a data breach. 

Are you affected by the Bitcoin ATM data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Senior Dating data breach exposes info of 765,000 users
• Robinhood class action alleges data breach exposed customer info
• Bojangles class action alleges restaurant experienced weeks-long cyberattack
• Hackers claim responsibility for Ford data breach; automaker denies reports