Bitcoin IRA and iTrustCapital, two platforms that let investors hold crypto inside retirement accounts, have disclosed data breaches linked to a threat actor identified as Tiffanny Milanovich. The companies haven't said how much data was exposed or when the attacks happened, but the incidents put a spotlight on how vulnerable the crypto retirement niche remains to security failures.
What the platforms have said
Both firms separately confirmed the breach and named Milanovich as the actor behind it. That's an unusual detail — most crypto hacks are tied to groups or collectives, not a single person. But neither Bitcoin IRA nor iTrustCapital has explained how they identified Milanovich, what data was taken, or whether law enforcement is involved. For users, that leaves more questions than answers.
Why retirement accounts are a sensitive target
These are not casual trading apps. They manage self-directed retirement accounts, which means they store more than wallet addresses. Social Security numbers, tax forms, and other financial paperwork live on those systems. A breach that exposes that data can lead to identity theft, phishing scams, and long-term financial damage. Crypto is already a target; retirement holdings just raise the stakes.
The transparency test
Right now, both platforms are keeping details close to the chest. They haven't said what data was taken, when the attack occurred, or what they've changed to prevent another one. That's a problem. When you're holding people's retirement savings, vague disclosure isn't enough. The incidents highlight the need for enhanced cybersecurity measures and transparency across crypto platforms to protect investors' assets.
The next step is up to the two companies. They'll need to finish their internal reviews, notify the affected users, and decide whether to offer credit monitoring or other protection. Those steps take time, and investors are stuck waiting. The way they handle that process will show whether the crypto retirement industry has learned anything from past breaches.
