According to CoinMeta, as disclosed by Zachxbt, its reviewed evidence indicates that two American crypto investment platforms, BitcoinIRA and iTrustCapital, are suspected of experiencing data breaches this year, yet neither has publicly disclosed these incidents to date. The leaked information is said to include user personal details, portfolio holdings, banking information, custodian details, and authentication status, among others. Zachxbt provided an example, stating that the threat actor “tiffany” utilized the relevant databases in June 2026 to attack a BitcoinIRA user, stealing over $1.2 million. He mentioned that he contacted both companies on August 21 to seek a response but has not received any reply to this day.