BitcoinIRA and iTrustCapital Accused of Hiding Data Breaches

On-chain investigator ZachXBT accused two cryptocurrency retirement services of hiding data breaches. BitcoinIRA and iTrustCapital allegedly suffered attacks this year without disclosing them to their customers.

ZachXBT claimed that threat actors accessed personal details from the crypto retirement services, including customers' portfolio holdings, banking details, custodian details, and verification status.

The researcher emailed both platforms on August 21 after verifying the breaches. After three days of no response, he published an alert publicly.

iTrustCapital responded to the allegations via X, stating that it has not experienced any recent third-party vendor data breaches affecting its platform. The company claimed to have a multi-step closed-loop system designed to mitigate losses for clients who may be targeted by phishing or scams.