Bitcoin ATM maker to refund customers impacted by zero-day hack

Bitcoin ATM maker General Bytes says it is reimbursing its cloud-hosted customers who lost funds in a "security incident" in March in which its customers' hot wallets were accessed.

As Cointelegraph previously reported, the ATM maker issued to statement regarding a security incident on March 17 and 18, involving a hacker remotely upload a Java application to your terminals and gain access to sensitive information such as passwords, private keys and funds from hot wallets.

In a recent statement to Cointelegraph, the ATM manufacturer It said it has since been moving quickly to "address the situation" and has made the decision to refund its "cloud-hosted customers who have lost funds."

"We have taken immediate steps to prevent further unauthorized access to our systems and are working tirelessly to protect our customers," General Bytes said in a statement.

It was understood that the hack led to at least least 56 BTC, worth more than $1.5 million at current prices, and 21.82 ETH, $37,000 at current prices, being deposited into wallets connected to the hacker.

According to General Bytes, it has thoroughly assessed the damage from the hack and has been "working tirelessly" to improve security measures and prevent similar incidents from happening again.

General Bytes told affected customers to implement new security measures after the attack. Source: General Bytes

Along with the rebate for affected customers, the ATM maker has also said that they are encouraging all customers to migrate to a self-hosted server installation, where they can effectively secure their server platform using VPN.

"We are investing heavily in additional human resources to help our customers migrate their existing infrastructure to a self-hosted server installation."

According to General Bytes, the hack did not affect most ATM operators who use self-hosted server installations" as these customers employ VPN technology to protect their infrastructure."

Related: More than 280 blockchains at risk of 'zero-day' exploits, security firm warns

The ATM maker first warned customers about the hacker in a March 18 patch release bulletin. As a result of the security breach, General Btyes shut down its cloud services.

"General Bytes takes the security of our clients' funds and data very seriously. We apologize for any inconvenience caused and remain committed to serving our clients with integrity and professionalism."

The company is based in Prague and according to his website has sold more than 15,000 Bitcoin (BTC) ATMs to shoppers in more than 149 countries around the world.