Hackers Steal Revolut Customer Data Including Bitcoin Records

Revolut recently exposed the personal information and crypto activity of select customers after mistakenly fulfilling a fraudulent government data request. The attackers used an unauthorized email account inside a legitimate government agency domain, which allowed them to bypass standard security filters. This trickery tricked the fintech firm into handing over passports, driver licenses, verification selfies, and full transaction histories including Bitcoin activity.

While no customer funds or private keys were stolen, the breach is a significant privacy concern. The exposed records link real world identities to residential addresses and specific blockchain transactions. This information could allow malicious actors to track individual onchain activity or target high net worth users. Revolut has blocked the fraudulent email address and reported the issue to regulators, though the company has not confirmed how many people were affected.

The incident highlights a growing tension between strict compliance rules and data safety. Fintech firms often store massive databases of personal records to satisfy anti money laundering requirements. When these databases are compromised, the damage goes beyond bank accounts. Industry observers are now questioning why Revolut did not perform a secondary verification check before sharing such sensitive user files.

Moving forward, traders should watch for updates on which government agency was compromised and whether other financial platforms received similar requests from the same source. For now, affected customers should remain alert for potential phishing attempts or social engineering attacks using their stolen personal information.