NewsMeter
Customer identity verification data and Bitcoin ($BTC) transaction records held at Revolut were accessed through a fraudulent request that impersonated a government domain, the company confirmed.
Onchain investigator ZachXBT speculated the incident targeted high-net-worth users. The breach covered two distinct categories of data. KYC files contain the identification documents customers submit during onboarding.
Bitcoin transaction records add the behavioral layer: the pattern, counterparties, and timing of on-chain activity.
Together, they link a verified identity to its financial footprint on the network without requiring any direct access to the blockchain. The attack vector relied on a fake government domain.
Keep reading