Revolut Data Breach: Hackers Use Fake Government Requests to Expose Passports and Crypto Histories

### Security Lapse: Revolut Data Exposure Highlights Risks of Sophisticated Phishing

In a concerning security incident, fintech leader Revolut inadvertently leaked highly sensitive user information-ranging from government-issued identification and verification selfies to comprehensive Bitcoin transaction logs-after being deceived by a fraudulent inquiry.

#### The Anatomy of the Deception
The breach occurred when Revolut’s internal teams received a data request that appeared to originate from an official government entity. Because the communication was routed through the agency’s legitimate email domain, it bypassed initial skepticism. Trusting the authenticity of the sender, the company processed the request, effectively handing over private customer records to an unauthorized third party.

This incident serves as a stark reminder of the evolving landscape of social engineering. According to recent cybersecurity reports, business email compromise (BEC) attacks have surged by over 30% in the last year, with attackers increasingly leveraging “domain spoofing” to bypass traditional security filters. Much like a master key that opens a door because it looks identical to the original, these attackers exploit the inherent trust placed in established communication channels.

#### Scope and Impact
While a spokesperson for the fintech firm characterized the event as a “sophisticated external impersonation scam,” the company has remained tight-lipped regarding the exact number of victims. They maintained that the broader infrastructure and user funds remained secure, yet the nature of the leaked data-specifically full crypto transaction histories-presents a significant privacy risk.

Myriad: Bitcoin’s next move? Click to make your prediction.

#### Targeted Threats and “Wrench Attacks”
Prominent blockchain investigator ZachXBT highlighted that the breach seemed to specifically target high-net-worth individuals. This has sparked widespread concern regarding the potential for “wrench attacks”-a term used in the crypto community to describe physical extortion or kidnapping attempts aimed at forcing individuals to reveal their private keys or transfer digital assets.

When attackers possess a victim’s full transaction history and identity documents, they gain the leverage necessary to conduct highly personalized extortion campaigns. As digital asset security becomes increasingly critical, this incident underscores the necessity for financial institutions to implement multi-layered verification protocols, even when requests appear to come from trusted government sources.

 » More Info >>>