Revolut falls for fake government requests, hands over customer data

British bank Revolut exposed sensitive customer information after falling for fraudulent requests sent from a legitimate government agency's email domain. In a statement shared with The Register, Revolut confirmed the attack, but did not specify how many customers were affected. The company also did not provide a list of affected data types. However, blockchain investigator ZachXBT, who shared Revolut's customer notifications on Friday, claimed the exposed information includes know-your-customer (KYC) data. Whichever identity document customers submitted as part of the account registration process – passport or driver's license – was compromised, as was the verification selfie submitted through the app, according to the shared emails....

Read the full article at the source.