Revolut Data Breach Exposes Crypto Records to Fraudsters

Revolut confirmed this weekend that it accidentally handed over private customer information to an unauthorized party. The attackers used an email account linked to a legitimate government agency domain to trick the fintech company into releasing sensitive records. Revolut stopped the requests once the internal team identified the fraud.

Personal details leaked in the incident include names, dates of birth, home addresses, and phone numbers. More alarmingly, the breach included copies of passports, driver licenses, and verification selfies. The unauthorized party also gained access to account statements and Bitcoin transaction histories. Notable figures in the crypto community, including former Mt. Gox CEO Mark Karpelès, reported that they were affected by the leak.

This incident highlights a growing danger for high net worth individuals who hold significant digital assets. Security analysts noted that the targeted nature of the attack suggests a focus on those with large crypto balances. While Revolut has not yet confirmed the total number of customers impacted, the firm maintains a massive global user base of over 80 million people.

This security failure follows a similar phishing issue at hardware wallet provider Trezor, which recently dealt with a breach at their email service provider. Investors should remain extra cautious about any unsolicited requests for documentation, even if they appear to originate from official government or corporate email addresses.