Revolut disclosed that it inadvertently shared customer personal and financial data, including Bitcoin transaction histories, with an unauthorized third party after mistaking a fraudulent government request for a legitimate one. The request originated from a spoofed email account within official government domain infrastructure with valid authentication credentials. The breach was discovered after Revolut contacted the actual government agency to verify the request, which revealed the compromised account.