Revolut Exposes Sensitive Customer Data Due to Fraudulent Request
- Revolut released sensitive customer data, including passports and transaction histories, after a fraudulent request appeared to come from a government agency.
- The request passed Revolut’s authentication checks, leading to the exposure of personal information.
- Customers affected were notified on Friday, with Revolut stating that systems and funds remain unaffected.
- A spokesperson confirmed the incident was due to a sophisticated impersonation scam using a legitimate email domain.
- Crypto analyst ZachXBT suggested the breach targeted high-net-worth individuals and was limited in scope.
This incident highlights vulnerabilities in identity verification processes, as users criticized mandatory information sharing practices following the breach. Revolut has since blocked the fraudulent email address and alerted relevant authorities.
The exposure of sensitive data serves as a reminder of potential risks associated with KYC compliance measures, as noted by affected users questioning their effectiveness in enhancing security.
