Byte Federal, recognized as one of the largest Bitcoin ATM operators in the United States, has recently faced a significant data breach. This incident potentially impacts the personal information of as many as 58,000 customers. The Florida-based company submitted an official notice to Maine’s attorney general on December 12, acknowledging the breach which occurred due to unauthorized access.
The breach was identified on November 18, over a month after it initially transpired on September 30. According to reports, a third-party software vulnerability was exploited by a cybercriminal. Immediately following the discovery, Byte Federal shut down its platform and reassured customers that no user assets or funds were compromised in the attack.
The filing disclosed that unauthorized attempts were made to access sensitive information of up to 58,000 customers, including names, dates of birth, addresses, and social security numbers. Though extensive data was at risk, Byte Federal stated there is no indication it has been misused. To address concerns, the company is implementing precautionary measures to safeguard client information.
In response to the breach, Byte Federal executed a comprehensive reset of all user accounts and communicated the need for customers to update their login credentials. Enhanced security measures have been applied to the platform's internal protocols. An independent cybersecurity team is investigating the cause and extent of the breach, with legal inquiries continuing simultaneously.
Operating 1,356 Bitcoin ATMs across the U.S., Byte Federal controls 4.3% of the nation's crypto ATM market. Bitcoin Depot leads in domestic market share with over 8,100 machines. Bitcoin ATMs provide a convenient method for converting fiat to cryptocurrency and vice versa, bypassing centralized exchanges.
The cryptocurrency environment has seen a rise in Bitcoin ATM scams, with the U.S. Federal Trade Commission noting a 1,000% increase in such incidents since 2020. As the landscape evolves, vigilance and robust security protocols remain paramount for operators and users alike.