Revolut has issued a notice to some customers stating that the company previously received a request for information that appeared to come from a government agency. Since the email used the official domain name of the agency and passed domain name verification, the company considered it a legitimate request and subsequently provided customer information to the attackers.

Leaked information includes Bitcoin records

The scope of this information leak is quite extensive, involving personal details such as names, dates of birth, and occupations, as well as contact information like addresses, email addresses, and phone numbers. The notification indicates that copies of passports or driver's licenses submitted by some users, as well as selfies used for identity verification, are also among the leaked items.

For encrypted users, what is more sensitive are financial information and records related to the blockchain. The leaked content includes account statements and withdrawal records with IBAN and wallet reference numbers, as well as a complete transaction history that contains Bitcoin transaction records. Revolut indicates that facial biometric telemetry data was not affected by this incident.

The company stated that the system and funds were not affected.

Revolut confirmed to foreign media that this incident is a "complex external impersonation scam." The attackers used legitimate domain name emails from government agencies to send fake requests, thereby obtaining customer information.

The company stated that the number of affected customers is "limited." They have already blocked the relevant email addresses and notified the impersonated institutions, law enforcement authorities, and regulatory bodies. Revolut did not disclose the exact number of affected individuals, nor did they specify which government institution was impersonated. The company also assured that their internal systems and customer funds were not affected.

High-net-worth users become the target

On-chain investigator ZachXBT indicates that this incident seems to be more of a targeted attack aimed at high-net-worth users. Since the leaked data contains detailed identity information and Bitcoin transaction histories, it has also raised concerns about the risk of "wrench attacks," where coin holders face threats in the real world due to the exposure of their identities.

Before this incident occurred, there had been several consecutive security issues with user data in the cryptocurrency industry. Recently, hardware wallet manufacturer Trezor saw an expansion of the scope of customer information exposure due to an issue with their customer service provider, and social platform X was also suspected of experiencing a data breach, which led to a large number of password resets.

• Leaked information includes copies of passports, verification selfies, and a complete history of Bitcoin transactions.
• Revolut states that the number of affected people is limited, but the specific scale has not been announced.
• The company stated that the system and customers' funds were not affected.

Additional information:Revolut has launched a euro-pegged stablecoin this year, EURR, and is currently also evaluating the IPO plan.