Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request

This is a data-governance failure, not a crypto-specific one: the weak point was identity verification on a government email domain, and the payload happened to include bitcoin records. The significance is that a single spoofed request can expose both KYC identity documents and full transaction histories, the two datasets exchanges and banks are trusted to keep separate and secure. For customers, the exposure is compounded because identity documents are not revocable the way a password is. The open question is whether such disclosure procedures get tightened across the sector.