Revolut falls for fake government requests, hands over customer data
Passports, selfies, transaction histories exposed as self-proclaimed culprits demand 10,000 Bitcoin
British bank Revolut exposed sensitive customer information after falling for fraudulent requests sent from a legitimate government agency's email domain.
In a statement shared with The Register, Revolut confirmed the attack, but did not specify how many customers were affected.
The company also did not provide a list of affected data types. However, blockchain investigator ZachXBT, who shared Revolut's customer notifications on Friday, claimed the exposed information includes know-your-customer (KYC) data.
Whichever identity document customers submitted as part of the account registration process – passport or driver's license – was compromised, as was the verification selfie submitted through the app, according to the shared emails.
The notifications also list account statements, IBANs, withdrawal records, and full transaction histories, including Bitcoin transactions, among the exposed data. Other exposed details include full names, dates of birth, home and email...
Copyright of this story solely belongs to www.theregister.com. To see the full text click HERE
