Revolut inadvertently sent complete customer account files including photos, passports, addresses, IBANs, and Bitcoin histories to unknown individuals impersonating Italian authorities. The leaked data, now circulating on Telegram with daily threats for payment, has exposed customers including Mt. Gox's former CEO Mark Karpelès and crypto entrepreneur Felix Römer.
Revolut customers' personal data was compromised in a breach where attackers obtained and began publishing KYC documents including photos, identity papers, and financial records through Telegram. The attackers, claiming to represent a law enforcement agency, used Italian certified email (PEC) to make the breach appear official, demanding payment from Revolut while threatening to release more victims' information daily.