BitcoinIRA and iTrustCapital Suffered Data Breaches, Exposing User Info

The cryptocurrency community is abuzz after on-chain investigator ZachXBT published a community alert alleging that two US-based investment platforms, BitcoinIRA and iTrustCapital, suffered data breaches this year that were never publicly disclosed.

According to the investigation, the potentially exposed data spans personal information, wallet addresses and the amounts held within them, banking details, information tied to account custodians, and users' account verification statuses.

The claims come from ZachXBT's review of evidence that suggests a threat actor operating under the nickname 'Tiffany' allegedly used the leaked BitcoinIRA data to target a specific user in June 2026, stealing over $1.2 million from them.

ZachXBT's investigation also highlights the pattern of scams that use targeted and convincing impersonation tactics, often using information gained from a breach to sound legitimate.