Revolut Gave Customer Passports, Bitcoin Records to Fraudulent Government Request

The notable point is not the breach itself but the vector: a request that passed as legitimate because it arrived from a genuine government domain, meaning standard verification of the sender would not have flagged it. That shifts the exposure from platform security to the trust model underlying lawful-access requests, a channel every crypto-friendly platform with KYC data depends on. Whether Revolut tightens request verification, and whether other platforms disclose similar incidents, is the open question worth watching.