Revolut Exposes Sensitive Customer Data in Unauthorized Government Request
Revolut, a digital banking platform, recently disclosed an incident where it exposed sensitive customer information due to a fraudulent government information request. The request was made from an unauthorized mailbox operating within a genuine government agency domain.
The affected information may include identity documents, verification selfies, addresses, account statements, and complete Bitcoin transaction histories. Revolut later verified that the request was unauthorized and blocked the address, alerting the agency and notifying regulators.
According to security expert ZachXBT, the incident appears to be limited in size and potentially targeted at high-net-worth users. However, Revolut has not publicly disclosed the affected agency or the number of customers involved.