Revolut exposed Bitcoin records after fake agency request

Revolut has disclosed customer identities and financial records, including Bitcoin transaction histories, after acting on a fraudulent request that appeared to come from a government agency. Summary Revolut said an unauthorized sender used an official government agency’s email domain. The disclosed records included identity documents, verification selfies, and full transaction histories. Bitcoin wallet reference numbers appeared in account statements listed in the customer notice. ZachXBT said the incident appeared limited and may have targeted high-net-worth users. According to a Revolut customer notice shared on Telegram by on-chain investigator ZachXBT, the request came from an unauthorized email account that used an official government agency’s domain. The message passed domain authentication checks, and Revolut said it believed the request was genuine when it provided the information. Source: Telegram/zachxbt The notice does not name the agency or say how the unauthorized sender obtained access to its email domain. It also gives no date for the request or the disclosure. ZachXBT said multiple customers received an alert email on Friday, Sep. 11, but neither he nor the portion ...