Revolut Data Leak Exposes Customer Info and Bitcoin Records

Revolut's data leak has raised concerns about user privacy after reports emerged of an unauthorized request exposing customer information and Bitcoin transaction records. The incident, initially reported by crypto investigator ZachXBT, may link wallet references to verified identities, creating longer-term risks due to the public accessibility of blockchain transactions.

The exposed files contained sensitive customer data, including passport or driving license copies, KYC verification selfies, and financial information such as IBAN details and account statements. The incident occurred on September 11, 2026, with Revolut acknowledging an unauthorized request from a mailbox operating within the domain of a real government agency.

Revolut's response included notifying affected customers, blocking the source address across its internal systems, and applying precautionary protections to affected accounts. However, the company has not publicly confirmed the exact number of customers affected or identified the government agency involved.