Revolut customer KYC and Bitcoin data exposed in phishing attack

Revolut customer data — Fintech giant Revolut has confirmed that customer Know Your Customer (KYC) data and Bitcoin transaction details were exposed after an attacker impersonated a government agency.

The breach occurred when an individual, using a domain designed to mimic a legitimate government entity, successfully submitted a fraudulent data request to Revolut. The company stated that the incident resulted in the unauthorized access and potential exposure of sensitive customer information.

While Revolut did not specify the number of affected users, on-chain investigator ZachXBT speculated that the attack may have been specifically targeting high-net-worth individuals on the platform. The company has notified relevant authorities and is contacting impacted customers directly.

This incident highlights the persistent threat of sophisticated phishing campaigns targeting financial institutions, particularly those with significant cryptocurrency operations. Revolut has not disclosed whether the breach involved any direct theft of customer funds.