Revolut Data Breach Exposes Passports and Bitcoin Histories

Revolut data breach — Fintech giant Revolut has disclosed a significant data breach, where it inadvertently leaked user passport details and full cryptocurrency transaction histories, including Bitcoin, in response to a fraudulent government request.

The company confirmed it fulfilled the request, which was sent from an email domain belonging to a legitimate government agency. The breach exposed identity documents and the complete crypto transaction records for a “limited” number of its users. Revolut stated the incident was isolated and that it has since enhanced its verification procedures for such official data requests.

While the exact number of affected customers was not specified, the incident highlights critical vulnerabilities in how financial platforms handle sensitive user data and comply with law enforcement inquiries. The exposure of full crypto transaction histories poses a unique privacy risk, potentially linking users’ identities to their on-chain activity.

The breach underscores ongoing concerns about data security at major crypto on-ramps and the methods bad actors use to impersonate authorities. Revolut, which offers crypto trading services to millions of customers globally, is investigating the incident and has notified relevant regulators.