Revolut Confirms Data Breach Through Fake Government Request

Revolut, a London-based fintech company, has confirmed a data breach affecting its customers. The incident occurred when an unauthorized third party used a legitimate government agency's email domain to submit fraudulent requests for customer information.

The exposed data included identity and contact details such as birth dates, postal and email addresses, and phone numbers, as well as copies of identity documents like passports and driver's licenses.

Revolut stated that the breach was a sophisticated external impersonation scam and that it blocked the email address after discovering the scam. The company also alerted the relevant government agency, law enforcement, and regulators.

The incident highlights the risk of social engineering in deanonymizing Bitcoin holders at mainstream financial platforms.