Someone Emailed Revolut From a Real Government Domain. Revolut Sent Back Passports and Bitcoin Histories.

No malware. No exploit. A fraudulent data request from a genuine government agency mailbox passed Revolut's checks, and the bank handed over ID scans, selfies, IBANs and full Bitcoin transaction records for a 'limited' set of customers. ZachXBT says it looks targeted at whales. Mark Karpelès says he got the notification.