Crypto Investment Platforms Bitcoin IRA and iTrustCapital Hit by Data Breaches

Bitcoin IRA and iTrustCapital, two platforms that let investors hold cryptocurrency in retirement accounts, have both reported data breaches connected to a threat actor going by the name Tiffanny Milanovich. Details of exactly what data was accessed have not been fully disclosed, but the incidents have raised fresh concerns about the security practices of crypto-focused financial services.

The breaches underscore a broader issue in the crypto investment space: platforms handling sensitive financial and personal data are attractive targets for attackers, yet transparency around how such data is protected is often limited. For businesses and individuals who use these platforms, a breach can mean exposed personal information, increased risk of phishing or identity theft, and reduced trust in the provider's ability to safeguard assets.

While this incident involves consumer-facing crypto platforms rather than traditional small businesses, it's a reminder that any organisation storing customer financial data needs strong security controls and clear breach-notification processes. Australian SMBs that use or recommend crypto-related financial tools should stay alert to vendor security incidents and review the data-handling practices of any third-party financial platform they rely on.