Revolut Breach Exposes Passports, IBANs, Bitcoin Data; 80M Users at Risk
Revolut confirms an attacker used a legitimate government-agency domain email with valid authentication to trick staff into releasing KYC/AML data and full financial histories. The exposed records include passport scans, verification selfies, IBANs, and Bitcoin transaction histories. Security teams should treat legal-request channels as a high-value social engineering surface.
Source: SecurityWeek · BleepingComputer