Revolut says customer data exposed through fake government email
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Revolut disclosed sensitive customer information, including passports, verification selfies, and transaction histories, after responding to a fraudulent request that appeared to come from a government agency email domain. The company later determined the requests were not authentic, blocked the email address, and notified affected customers, law enforcement, and regulators. Revolut stated that its systems and customer funds were not compromised.
Why it matters
The incident highlights vulnerabilities in current authentication processes for government information requests and raises concerns about the security and privacy of customer data. It also sparked user criticism of mandatory KYC (Know Your Customer) information sharing practices. The source does not elaborate further on potential market or policy implications.
Key context
Revolut's authentication checks initially accepted requests sent from a government agency email domain, which were later found to be fraudulent. Crypto analyst ZachXBT suggested the attack was small in scale and targeted at high-net-worth individuals. The company rapidly responded by blocking the source and informing relevant authorities.
Key numbers and entities
Revolut is the company involved. The incident affected an unspecified, limited number of customers. ZachXBT, a crypto sleuth, commented on the nature of the incident. Customer data exposed includes passports, verification selfies, and transaction histories. No specific figures on the number of users impacted are provided.
What remains unclear
The source does not specify how many customers were affected, the identity of the impersonating party, or the exact methods used to carry out the impersonation scam. It is also unclear whether any stolen data has been misused or if there will be further changes to Revolut’s information handling policies.