Blockchain researcher ZachXBT suggests that fintech company Revolut may have shared some users’ personal data with third parties by mistaking a fake government agency request for a real one. According to information shared on ZachXBT’s personal channel, the incident began when Revolut received a customer information request that appeared to come from a legitimate government agency and used the agency’s official email domain.
Allegedly, the email in question was accepted as genuine by Revolut because it contained valid domain verification information. As a result of the company failing to detect that the request was fraudulent, some user information may have been accessed or shared in response to the request.
Potentially affected data includes users’ first and last names, dates of birth, occupations, addresses, email addresses, and phone numbers, as well as copies of passports or driver’s licenses, selfies taken during identity verification, account statements, IBAN information, withdrawal records, and extensive transaction histories including Bitcoin transactions. Revolut’s security notice to users stated that biometric facial telemetry data was not affected by the incident.
ZachXBT noted that while the incident appears limited in scale at present, it may have specifically targeted high-asset users. According to the statement, multiple Revolut users recently received security alerts related to the incident.
*This is not investment advice.
I recently fell victim to a scam where my cryptocurrency was stolen, and I felt like giving up completely.However, I discovered Hispeed Recovery Company, and they were able to help me get my funds back successfully.Their entire service was professional, trustworthy, and they were very supportive every step of the way.I can’t thank them enough for their dedication and the results they achieved.If you’re facing a similar situation, I highly recommend reaching out to them.You can contact them at www,hispeedrecoveryservice.com.