Experts opine that almost all ATMs today are vulnerable to software-based cyberattacks and give up customer data to cybercriminals. Hackers can exploit security flaws in the security applications that ATMs run and then connect to the ATM hard drive to install malicious software, provided the drive isnt encrypted. Some ATMs are attacked by brute-forcing weak administrative credentials, such as brute forcing weak admin credentials. Non-intrusive attacks require only 15 minutes to be carried out, which are mostly done past midnight or in the early hours of the morning.”]
Source: https://hackercombat.com/discussing-atm-hacks-and-the-different-kinds-of-atm-attacks/