Code & Chain · Signal Desk

Revolut Data Breach: Fake Government Request Fooled Staff, Exposing Bitcoin Transaction History and ID Documents

Original sourceSpazioCrypto

Summary

Revolut disclosed an identity data breach after someone impersonated a legitimate government agency to make a request, leading to sensitive customer data being handed to an unauthorized third party, including ID documents, home addresses, account information, and full Bitcoin transaction histories.…

Key points

  • It reminds all fintech and crypto platforms that the weakest link is often the human process for verifying legitimate data requests, not the firewall.
  • The combined leak of full transaction history and identity documents escalates users from online phishing risk to a physical security risk of being targeted.
  • Users holding large crypto assets should be more vigilant and review publicly identifiable information; fintech firms must implement multi-factor and callback verification and redesign internal approval for law enforcement and government data requests.

Editorial note

This page is Code & Chain's editorial summary of public sources. It may be prepared with AI assistance and published through an automated workflow. Refer to the original sources; this content is not investment, legal, or tax advice.