On September 12, on-chain sleuth ZachXBT reported a possible data leak involving Revolut customers. According to him, the company may have handed over user info to outside parties after mistaking a fake government request for a legit one. Basically, this means some customers’ personal and financial data might have been accessed without authorization.

What info may have leaked

The categories ZachXBT mentioned include names and contact details, document scans, KYC verification selfies, bank account info, and transaction histories—even Bitcoin transfers. That’s a mix of basic ID, supporting documents, and transaction data, making this leak especially sensitive.

Scope and possible targeting

ZachXBT estimates the incident hit only a limited number of accounts, and it might have specifically targeted high-net-worth users. Some of those affected have already gotten notifications from Revolut. ZachXBT didn’t share more details on the full scale or technical side, but he did stress that the breach was limited and mostly impacted select profiles.