Crypto retirement platforms BitcoinIRA and iTrustCapital suffered data breaches enabling social engineering attacks. Blockchain investigator ZachXBT linked these incidents to a single US-based attacker, Tiffany Milanovich, responsible for at least $5 million in cryptocurrency thefts. One victim alone lost $1.2 million in bitcoin and ethereum after receiving a spoofed email appearing to be from BitcoinIRA. Neither company has issued a public statement confirming the breaches or disclosing the scope of compromised data. These incidents are part of a surge in impersonation fraud in the crypto sector, with the FBI logging 80,000 complaints in 2025 and $2.9 billion in total losses.
Source: Read the original article
