Revolut Phished: Sensitive User Data Exposed to Sophisticated Attack

Revolut, a financial platform, recently disclosed that it had fallen victim to a sophisticated phishing attempt. The incident occurred when an attacker sent a legitimate-looking email from an official government domain, claiming to be from a valid authority. Revolut's security team, believing the request to be genuine, shared sensitive user data with the attacker.

The data revealed included copies of passports, driver's licenses, and verification selfies, as well as full Bitcoin transactions and home addresses. According to blockchain investigator ZachXBT, the incident was likely small in scale but could have targeted high-net-worth crypto users.

Revolut has since informed the affected individuals and claimed that no customer funds were stolen during the breach. The incident highlights a vulnerability in off-chain data storage, where sensitive information is linked to on-chain transactions.