Revolut Confirms Data Breach Involving Passports and Bitcoin Records Following Sophisticated Impersonation Attack

Revolut has confirmed that it was targeted by a sophisticated impersonation attack in which an unauthorized third party used a legitimate government agency email domain to request customer data. The company stated that it inadvertently provided files containing sensitive information, including passports, selfies, and Bitcoin transaction records, to the attacker. Revolut emphasized that customer funds, login credentials, and biometric data remain secure, and that it has notified the affected individuals, law enforcement, and relevant regulators. The specific government agency involved has not been disclosed due to an ongoing police investigation.