🔴 The hacker asks Revolut for his data. And Revolut gives it to him!

British fintech company Revolut has confirmed the leak of its customer data. Furthermore, Revolut specialists themselves transmitted user data to attackers. The attackers sent fake requests to the company via email, pretending to represent an unspecified government entity. Because the emails came from an address in the agency's real domain, Revolut employees mistook them for authenticity and disclosed the requested information.

The disclosed data included dates of birth, postal and email addresses, phone numbers, and copies of identification documents, including passports and driver's licenses. Additionally, the attackers may have obtained selfies taken by the victims for identity verification, bank statements, and transaction history.