Revolut Exposed Passports and Bitcoin Records After Fake Government Request: Report
On-chain investigator ZachXBT revealed earlier right this moment that Revolut had disclosed extremely delicate private and monetary data belonging to sure prospects after receiving what seemed to be an genuine authorities request.
The firm despatched emails to the affected customers, admitting that the uncovered data included passports, verification selfies, addresses, and full Bitcoin transaction historical past.
What Was Exposed
In the e-mail despatched to prospects and revealed by ZachXBT on his Telegram web page, Revolut defined that it acquired a request for data that appeared to originate from a professional authorities company. The sender was not merely spoofing an handle that appeared official. The request got here from an unauthorized electronic mail account utilizing the federal government company’s precise electronic mail area and carried legitimate area authentication credentials, the corporate added.
Revolut fulfilled the request underneath the assumption that it was legit. The disclosed data probably included sure prospects’ full names, dates of start, occupations, house addresses, electronic mail addresses, and telephone numbers. More delicate materials included copies of passports and/or driver’s licenses and the selfie pictures shoppers had provided through the verification course of. The excellent news, in line with the corporate, is that biometric facial telemetry itself was not compromised.
However, the agency mentioned it has supplied monetary data, together with account statements containing IBANs, account-opening dates and pockets reference numbers, in addition to withdrawal data and full transaction historical past, together with BTC transactions.
So far, Revolut has not publicly named the federal government company concerned, and the discover despatched to prospects doesn’t point out whether or not passwords, non-public keys, or their funds had been accessed.
Going Against the Rich?
The on-chain sleuth described the incident as “seemingly restricted in measurement,” because it appeared that the perpetrators targeted solely on high-net-worth customers. However, this hasn’t been confirmed both independently or by Revolut itself. In addition, the corporate hasn’t disclosed the precise variety of affected shoppers.
Given the out there data as of press time, the incident seems to be an unauthorized disclosure relatively than a direct compromise of Revolut’s infrastructure. The firm itself instructs authorities and law-enforcement our bodies to submit official data requests by way of a devoted channel.
The publish Revolut Exposed Passports and Bitcoin Records After Fake Government Request: Report appeared first on CryptoPotato.
