Bitcoin IRA and iTrustCapital suffer data breaches linked to threat actor Tiffanny Milanovich

Two of the most prominent crypto retirement account platforms, BitcoinIRA and iTrustCapital, have been hit by data breaches that enabled a wave of social engineering attacks, with on-chain sleuth ZachXBT linking the incidents to a US-based threat actor named Tiffany Milanovich. The damage so far: at least $5 million in stolen cryptocurrency. One victim alone lost $1.2 million in Bitcoin and Ethereum after receiving a spoofed email that appeared to come from BitcoinIRA. Neither company has publicly acknowledged or commented on the breaches. How the attacks worked Evidence uncovered by ZachXBT suggests that Milanovich gained unauthorized access to customer databases at both BitcoinIRA and iTrustCapital, giving her the raw material needed to run highly targeted phishing campaigns. Armed with personal details, Milanovich allegedly impersonated customer support representatives. She sent fraudulent emails designed to look like official platform communications, then followed up with phone calls. The goal was classic social engineering: trick victims into revealing private keys and seed phrases. In one particularly costly incident in June, a victim received what appeared to be a legitimate...