Revolut Exposes Customer Data in Government Request Snafu
Revolut, a popular fintech company, has reportedly disclosed customer data to an unauthorized government request. The data included customers' personal and financial information, including Bitcoin transactions. According to an email shared by onchain sleuth ZachXBT, the request was sent from a fake email account using the government agency's official domain and carried valid domain authentication credentials.
The exposed data included full names, dates of birth, occupations, postal addresses, email addresses, and telephone numbers. Identity and verification information, including passport or driver's license copies and verification selfies, were also listed. The financial data included account statements, IBANs, withdrawal records, and full transaction histories, including Bitcoin activity.
Experts suggested that Revolut may have failed to recognize the request was fraudulent before sharing customer information. While the incident is likely limited in size, it seems to have targeted high net worth users.