Massive Data Breach Exposes 58,000 Customers of Bitcoin ATM Operator Byte Federal

Overview

Hackers have compromised the personal data of over 58,000 customers of United States-based Bitcoin ATM operator Byte Federal.

Details of the Breach

According to a filing with the Maine Attorney General’s office, Byte Federal was breached on September 30 by an unknown attacker who exploited a vulnerability in GitLab, a third-party project management and collaboration software. This allowed them to compromise one of its servers.

Compromised Information

The breach affected 58,000 customers, with compromised data including:

• Names
• Addresses
• Phone numbers
• Government-issued IDs
• Social Security numbers
• Transaction activity
• User photographs

While no funds or user assets have been stolen, Byte Federal has urged customers to reset their login credentials and has already performed a hard reset on all customer accounts per their post-incident update.

Company Response

The company is working with an independent cybersecurity team to determine the cause of the incident. At the time, Byte Federal stated that they found “no evidence” of the leaked information being misused.

Company Background

Byte Federal is currently the eighth largest Bitcoin ATM operator in the US, with 1,387 machines spread across the country. They are also embroiled in a trademark infringement lawsuit with leading crypto ATM operator Bitcoin Depot over the use of similar branding, which Byte Federal claims violates its trademark rights.

Regulatory Concerns

This development comes as cryptocurrency ATMs have increasingly faced criticism for their role in facilitating illicit activities. Regulators in Australia, the United Kingdom, and Germany have all warned of the risks associated with cryptocurrency ATMs while increasing oversight and taking enforcement actions against unlicensed operators.