Community Alert: I've reviewed evidence that two US based investment platforms: BitcoinIRA & iTrustCapital allegedly had data breaches this year but appear to have not disclosed the incidents publicly.

Leaked info: Personal details, Portfolio holdings, Banking details, Custodian details, Verification status, etc

Example: Threat actor ‘Tiffany’ targeted a BitcoinIRA user and stole $1.2M+ using the db in June 2026.

I reached out to both companies for comment on August 21 but have not heard back yet.