Revolut Falls for Government Impersonation Scam, Leaks Sensitive Customer Data

Revolut, a fintech giant, has been involved in a sensitive data leak after falling for a sophisticated external impersonation scam. The company handed over customer information, including passport copies and full Bitcoin transaction histories, to a malicious actor who posed as a legitimate government agency.

The breach appeared to target high-net-worth users, raising concerns about 'wrench attacks' amid a wave of similar leaks. Revolut described the incident as a sophisticated external impersonation scam where an unauthorized third party used a legitimate government agency domain email to submit fraudulent requests for information.

A limited number of customers were affected, but systems and customer funds remained unaffected, according to Revolut. The company declined to say how many people were hit or which agency was impersonated.