Revolut alerted users about PII exposure after fraudulent government request

Revolut reportedly exposed personally identifiable information belonging to a subset of users after failing to identify a fraudulent government request.

The exposed information may have included:

- Passport or driver’s licence copies and verification selfies
- Account statements, IBANs, withdrawal records, and complete transaction histories, including Bitcoin activity
- Full names, dates of birth, and occupations
- Home addresses, email addresses, and phone numbers

The incident appears to have affected a limited number of users and may have targeted high-net-worth individuals. Revolut sent email notifications to multiple users about the incident.