As if you needed more reason to distrust the entire idea of KYC… service phished into handing over their client’s personal information. The absolute irony, yet not a laughing matter.
No one will protect your data but you, start there. Self-sovereignty and accountability now.
⚠️ ALERT: Revolut falls for a FAKE government request, exposing sensitive personal information of customers in a disturbing data breach.
Revolut disclosed that it complied with a fraudulent government request using a spoofed official email and valid credentials, exposing PII belonging to a group of customers.
The leaked data reportedly includes passports/driving licences, verification selfies, names, DOBs, occupations, home addresses, emails, phone numbers, IBANs, account statements and full transaction histories, including Bitcoin activity.
No customer funds were reportedly lost and Revolut says its systems were not hacked.
The company has notified affected users and regulators and blocked the source.
Social-engineering attacks are on the rise, with attackers increasingly exploiting human trust and weak verification processes rather than technical vulnerabilities.