Fintech and banking enterprise Revolut leaked confidential consumer information—such as passport duplicates, verification photographs, and complete transaction records—following a deceptive inquiry that appeared to originate from a state institution.
Inquiries regarding client details transmitted from an authentic state agency email suffix successfully cleared Revolut’s verification protocols, as noted in an update by International Cyber Digest on X. Revolut subsequently determined these were ungenuine, and users whose data was breached received alerts on Friday.
A corporate representative informed Cointelegraph on Saturday that “Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information.”
The spokesperson additionally stated that upon discovering the issue, Revolut blocked the email address and informed the proper state entity. They additionally alerted law enforcement bodies and monetary watchdogs.
Related: Fears of AI-driven DeFi hack epidemic overstated for now — but not for long
“Revolut systems and customer funds are unaffected. We have contacted the limited number of impacted individuals directly to inform them and provide support,” the spokesperson said.
Digital asset investigator ZachXBT reportedly expressed his belief that the breach was restricted in scope and targeted wealthy account holders.
The event sparked significant debate on X, with several participants condemning the existing framework of mandatory data collection. Marc Zeller posted that he woke up to find his entire profile exposed by Revolut, noting: “Sharp reminder that KYC hasn’t produced meaningful upside and has put many in harm’s way.”
Magazine: Is Bitcoin too volatile to risk your retirement on?
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Originally published at https://cointelegraph.com/news/revolut-says-customer-data-exposed-through-fake-government-email?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.