Revolut Falls for Fake Government Request, Exposing Sensitive Customer Data

Revolut, a digital banking and crypto platform, has disclosed that it shared customer data after receiving what appeared to be a legitimate government request. The sender used an official government agency's email domain and passed standard authentication checks.

The company said it fulfilled the request because it seemed genuine. However, the request was actually fraudulent, exposing sensitive personal information of customers in a disturbing data breach.

The disclosed records included full names, dates of birth, passport copies, verification selfies, and account statements. Bitcoin wallet reference numbers and full transaction histories were also included in the disclosed records.