Revolut Exposes Customer Data in Government Scam Incident

Revolut Faces Data Breach Following Fraudulent Request

Revolut has inadvertently disclosed sensitive customer data, including passport copies and detailed Bitcoin transaction records, after falling victim to a sophisticated impersonation scam. The fintech company responded to a fraudulent request that appeared to come from a government agency, leading to the exposure of personal information for a limited number of customers.

A Revolut spokesperson described the incident as a "sophisticated external impersonation scam," assuring clients that their funds and systems remain secure. However, specific details regarding the number of affected customers and the impersonated agency were not revealed.

Crypto investigator ZachXBT highlighted that the breach primarily targeted high-net-worth individuals, raising alarms about potential violent "wrench attacks" aimed at cryptocurrency holders. The incident has sparked backlash on social media, with users questioning the effectiveness of know-your-customer (KYC) regulations, which they feel have not provided adequate protection.

The fraudulent communication utilized a legitimate government domain, tricking Revolut into providing extensive personal data, including names, birth dates, addresses, and verification documents. Although financial data like IBAN numbers and transaction histories were compromised, Revolut confirmed that no biometric facial data was leaked.

In response to the breach, Revolut has blocked the fraudulent email address and notified relevant authorities, including law enforcement and regulatory bodies. The incident adds to the growing concerns surrounding data security in the cryptocurrency sector, especially following recent breaches involving other companies like Trezor and X.

As Revolut continues to navigate this challenging landscape, it is also planning an initial public offering (IPO) and has recently launched a euro-pegged stablecoin, EURR.