- Revolut said some customer data was exposed after fake requests came from a legitimate government agency email domain.
- The compromised information included passports verification selfies and full transaction histories for a limited number of customers.
- Revolut said its systems and customer funds were unaffected and that it notified impacted users regulators and enforcement agencies.
The Revolut data breach involved sensitive customer records that were released after the company received fraudulent requests appearing to come from a government agency. According to the report, requests for customer information were sent from a legitimate government agency email domain and passed Revolut’s authentication checks before the company later decided they were not genuine. Revolut said the exposed material included passport copies, verification selfies and full transaction histories for some customers. The company also said the incident was tied to a sophisticated external impersonation scam and that affected individuals were contacted directly on Friday.
Revolut data breach exposed sensitive records
The report said the exposed information covered highly personal records. These included copies of passports, verification selfies and full transaction histories belonging to some customers. Revolut said the data was released after a fraudster used what appeared to be a government agency domain in requests for customer information.
International Cyber Digest posted on X that requests coming from a legitimate government agency email domain passed Revolut’s authentication checks. Revolut later concluded those requests were not authentic. After that finding, the company said customers whose information had been compromised were notified on Friday.
How the false requests passed checks
A Revolut spokesperson told Cointelegraph on Saturday that the company had identified what it described as a sophisticated external impersonation scam. According to the spokesperson, an unauthorized third party used a legitimate government agency domain email to submit fraudulent requests for information.
The company said it responded once the activity was detected. Revolut said it blocked the address involved and alerted the relevant government agency. It also said enforcement agencies and financial regulators were informed about the incident.
Revolut data breach response and customer impact
Revolut said its own systems were not affected by the incident. The spokesperson also said customer funds were unaffected. The company described the number of impacted individuals as limited and said those customers were contacted directly and offered support.
Crypto sleuth ZachXBT reportedly said he believed the incident was limited in size and targeted high-net-worth users. The source did not give a number of affected customers, but it did note that the exposed group was limited and that the company reached out to those individuals directly.
Reaction on X after the data exposure
The incident drew criticism on X from users reacting to the exposure of personal records. Some of the discussion focused on the broader practice of mandatory information sharing after news spread that customer identity documents and transaction histories had been leaked.
Marc Zeller wrote that he woke up to all his data being leaked by Revolut. He added that the event was a sharp reminder that KYC had not produced meaningful upside and had put many people in harm’s way. The report said the reaction on X contributed to wider debate around the incident.
Conclusion
The Revolut data breach centered on fraudulent information requests that appeared to come from a legitimate government agency email domain and passed the company’s checks. Revolut later determined the requests were not authentic and said some customers had sensitive material exposed, including passport copies, selfies used for verification and complete transaction histories. The company said its systems and customer funds were unaffected, and that it had blocked the address, informed the relevant government agency, and notified enforcement agencies and financial regulators. With impacted customers contacted directly, the Revolut data breach has also sparked criticism on X over mandatory information sharing.
Disclaimer
The information provided in this article is for informational purposes only and should not be considered financial advice. The article does not offer sufficient information to make investment decisions, nor does it constitute an offer, recommendation, or solicitation to buy or sell any financial instrument. The content is opinion of the author and does not reflect any view or suggestion or any kind of advise from CryptoNewsBytes.com. The author declares he does not hold any of the above mentioned tokens or received any incentive from any company.
Featured image created by AI
