This week, criminals managed to gain access to the customer data of Revolut. The bank itself provided the information to the fraudsters after receiving a fake letter that imitated a request from a government agency. Compromised data included home addresses, passports, selfies for identification, and transaction histories of customers. As noted by the publication, Revolut acknowledged the incident. The request to the bank came from a legitimate address of a government agency and contained authentic credentials that had previously passed Revolut's checks. The letter did not seem suspicious to the company, so it provided the requested customer information. Only after that did the bank decide to contact the agency, which turned out to have sent no such requests. The company stated that the bank's systems were not compromised. Nevertheless, the fraudsters obtained passports, driver's licenses, selfies for verification, names, home addresses, dates of birth, email addresses, phone numbers, IBANs, and transaction histories, including data on interactions with bitcoins. Revolut is withholding the number of affected customers. Blockchain researcher known as ZachXBT drew attention to the incident and noted that the fraudsters targeted the wealthiest clients of Revolut.
