22+ hour, 8+ min ago   (849+ words) Revolut’s fake government request passed SPF, DKIM and DMARC checks before exposing customer KYC records and Bitcoin transaction histories. British fintech Revolut has informed a subset of its customers that some of their personal and financial records, including Bitcoin transaction…...

3+ hour, 22+ min ago   (963+ words) ▶ Revolut confirmed on September 12, 2026 that it disclosed passports, selfies, IBANs, and full Bitcoin transaction histories to an unauthorized third party who impersonated a government agency. ▶ The fake request used a legitimate government domain email that passed SPF, DKIM, and DMARC…...

5+ day, 5+ hour ago   (323+ words) Cryptocurrency wallet manufacturer Trezor has revealed that a breach at a key shipping partner has affected 67,000 more customers than originally thought. The new victim count represents a 479% increase on the original estimate. Read more on Trezor: Major Phishing Campaign Targets…...

11+ hour, 20+ min ago   (422+ words) A spoofed government email passed all standard authentication protocols, tricking the fintech giant into handing over identity documents, transaction histories, and Bitcoin activity records. Revolut, the British fintech company eyeing a $200 billion valuation and a banking license, just gave away…...

12+ hour, 36+ min ago   (626+ words) Revolut allegedly disclosed sensitive customer information after receiving fraudulent government information requests. On-chain investigator ZachXBT warned that the incident could have been an attack on high-net-worth individuals. Several customers were said to have been notified by e-mail regarding the incident....

2+ day, 11+ hour ago   (381+ words) Trezor confirms an email-provider breach and says its wallets remain safe, while BitBox investigates a likely newsletter-provider compromise. Hardware-wallet makers Trezor and BitBox warned users on Sept. 9 about phishing emails impersonating their brands, urging recipients to avoid the messages' links…...

19+ hour, 10+ min ago   (748+ words) Revolut disclosed personal and financial information belonging to some customers after treating a fraudulent government information request as legitimate, exposing a weakness in how lawful data demands are authenticated when the requesting authority’s own email infrastructure is compromised. The incident…...

23+ hour, 12+ min ago   (441+ words) Updated on: September 12, 2026 Revolut’s official statement is as follows from the email sent to affected users: The 2026 twist is the payload. Four years ago, attackers walked away with contact details and masked card fragments: useful phishing fuel, but limited. This…...

2+ day, 8+ hour ago   (336+ words) An authentication weakness in the Brevo email marketing service enabled a malicious actor to compromise 138 customer accounts and distribute phishing messages to hundreds of thousands of cryptocurrency holders. 🚨 SECURITY WARNING 🚨 Brevo (formerly Sendinblue) has reportedly been compromised. Phishing emails impersonating…...