ATM jackpotting combines physical access, software abuse, and cash theft. Retailers that host an ATM should know who owns it, who services it, and who receives an alert when its enclosure or software changes.
What the evidence supports
The FBI reported 1,900 ATM jackpotting incidents since 2020, including more than 700 incidents and over $20 million in losses during 2025. Its February 2026 FLASH explains that actors exploit physical and software vulnerabilities and deploy malware that forces machines to dispense cash.
Why it matters to a Connecticut operator
The FBI figures describe U.S. ATM incidents generally, not cannabis dispensaries specifically. The relevant operator action is to manage the ATM as a third-party technology and cash-handling risk.
Operator checklist
- Record ATM owner, model, software support status, service vendor, and emergency contact.
- Restrict and monitor physical access to ports, cabinets, and service areas.
- Require service visits to be scheduled and verified with the vendor.
- Preserve camera footage and device logs and contact law enforcement promptly after suspicious activity.
Where to go next
- What cybersecurity risks do dispensaries face?
- Downtime Prevention: vendor risk and operational continuity
Scope note: This briefing separates documented facts from practical recommendations. It is cybersecurity guidance, not legal advice or a statement that every recommended control is expressly required by Connecticut cannabis regulations.