Revolut confirms data breach after scam email exposes Bitcoin user details

Revolut disclosed that a sophisticated impersonation attack compromised customer data after the fintech firm responded to what it believed was a legitimate government request. The breach exposed information tied to cryptocurrency users, including Bitcoin transaction histories alongside identity documents like passport and address details. Blockchain investigator ZachXBT first surfaced the incident publicly. High-net-worth Bitcoin holders were reportedly among those targeted by the fraudulent data request scheme.

• Revolut fell victim to a social engineering attack where attackers impersonated government authorities to extract customer records, highlighting risks even regulated platforms face when verifying official requests.
• Exposed data included crypto holdings, transaction history, and personal identification - a combination particularly valuable to criminals targeting affluent users.
• The breach underscores the tension between compliance obligations and security: firms must respond to lawful requests but struggle to authenticate them in real time.