BitcoinIRA and iTrustCapital Linked to $1.2M Crypto Theft via Alleged Data Breach
US-based retirement platforms BitcoinIRA and iTrustCapital have been linked to a $1.2 million crypto theft, according to an investigation by on-chain analyst ZachXBT.
The alleged data breach occurred in June 2026, when a threat actor using the nickname 'Tiffany' used the stolen information to target a specific user and steal more than $1.2 million from them.
ZachXBT claims that the potentially exposed data spans personal information, wallet addresses, banking details, and account verification statuses, making it a targeting list for scammers.
The investigation highlights how breaches at retirement platforms can be particularly sensitive due to the type of data collected, including custodial relationships and balances, which can go undetected for months.