Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Revolut confirms that sensitive customer information was leaked due to phishing attack
Revolut has confirmed that after a complex phishing attack, it mistakenly disclosed sensitive customer information to an unauthorized third party. Multiple media outlets reported over the weekend that the digital banking platform shared customer records with outsiders disguised as officials, using email addresses hosted under the domain names of legitimate government agencies. A company spokesperson explained that Revolut blocked suspicious addresses immediately after discovering the fraud and described the incident as an advanced identity impersonation against its customers.
Nature of the compromised information
Notifications circulated among users show that the compromised data includes personal details such as full name, date of birth, home and email addresses, phone numbers, and scanned copies of identification documents such as passports and driver's licenses. The report also showed that verification selfies, account statements, transaction records and information related to cryptocurrency positions such as Bitcoin were also leaked.
Former Mt. Gox CEO Mark Karpelès publicly stated that he had received a notice of impact, confirming that the breach affected well-known people in the cryptocurrency field. Notices sent to affected users list the disclosed information, including names, dates of birth, contact details, and even copies of identification documents.
Target user and company response
Independent blockchain investigator ZachXBT issued a vulnerability alert to its followers and advised attackers to focus mainly on high-net-worth customers. However, Revolut has not disclosed the total number of users affected or specified the public agency domain names used in the fraud request.
The phishing incident has exacerbated growing concerns about "wrench attacks." This is a term for physical coercion or targeted fraud aimed at gaining access to cryptocurrency assets.
Small Dictionary: Wrench attack
This is a security term in the field of cryptocurrency. It refers to an attack method in which criminals use threats or force to extract sensitive information such as passwords, as opposed to traditional hacking methods that rely on software vulnerabilities.
Similar incident in the industry
Last week, hardware wallet provider Trezor announced a similar vulnerability that revealed that an attacker had hacked into its mail provider and sent phishing messages from its legitimate domain name. The incident followed the ShipMonk leak, which reportedly exposed the information of 67,000 U.S. customers.
Revolut is a new London bank established in 2015, serving more than 80 million customers worldwide. Earlier this month, the Office of the Comptroller of the Currency conditionally approved Revolut's application to establish National Bank. In recent months, Revolut has begun offering its euro stablecoin EURR in Denmark, Poland and Portugal, and is reportedly considering a listing, which could value the company as much as US$200 billion.
Security experts in the cryptocurrency space continue to call for increased awareness and strengthened protocols, as digital asset holders remain hot targets for complex attacks.
