Revolut Exposes Customer Data After Phishing Email Passes Security Checks

Digital bank Revolut revealed that it inadvertently disclosed sensitive customer data after a phishing email impersonating a government agency passed its internal verification process. The breach occurred when someone with access to the agency's real infrastructure submitted a fraudulent request for customer information, which cleared authentication checks.

The leaked records included passport scans, home addresses, and full Bitcoin transaction histories belonging to an unknown number of customers. Revolut has since notified affected customers, alerted law enforcement and financial regulators, and blocked the source of the request.

Critics say the breach highlights a failure in procedural security measures rather than a system hack or data theft. ZachXBT, an on-chain investigator, noted that the incident appeared to be limited in scale and seemed targeted at higher-net-worth users.