Revolut Data Leak Exposes Customer Information to Malicious Actors

A recent data leak allegedly exposed sensitive customer information from Revolut, a digital banking platform. The incident occurred when malicious actors sent fake government requests to Revolut using a valid government domain and passing domain authentication checks.

The leaked information reportedly includes identity documents, verification selfies, full names, dates of birth, occupations, addresses, email addresses, and telephone numbers. Additionally, the exposure may have included financial data associated with Revolut accounts, including IBAN numbers, account statements, withdrawal records, and full transaction histories.

ZachXBT, an on-chain investigator, warned that the incident could have been targeted at high-net-worth individuals, as some of the transaction records reportedly contained Bitcoin transfers. This may raise additional risks for customers who are active users of crypto services or hold significant digital asset portfolios.