Revolut wasn't hacked. that's the worse version
somebody sent a request from a real government agency email domain. it passed authentication. Revolut's notice says it was "fulfilled under the reasonable belief that it was an authentic government agency request"
what went out:
- who you are: name, birth date, address, phone
- ID copies and the verification selfie
- IBANs, bitcoin wallet references, every transaction
"systems and customer funds are unaffected". true, and beside the point
an address plus ID plus a $BTC history is a list of doors
ZachXBT says it looked aimed at high-net-worth users
lessons:
- assume KYC data lives forever
- ask how your bank checks who's asking
- keep the bitcoin story away from apps that know your address
i use Revolut and nobody can un-send what already went out. follow if you want the next one of these before your bank emails you, low bar i know)
#Privacy
somebody sent a request from a real government agency email domain. it passed authentication. Revolut's notice says it was "fulfilled under the reasonable belief that it was an authentic government agency request"
what went out:
- who you are: name, birth date, address, phone
- ID copies and the verification selfie
- IBANs, bitcoin wallet references, every transaction
"systems and customer funds are unaffected". true, and beside the point
an address plus ID plus a $BTC history is a list of doors
ZachXBT says it looked aimed at high-net-worth users
lessons:
- assume KYC data lives forever
- ask how your bank checks who's asking
- keep the bitcoin story away from apps that know your address
i use Revolut and nobody can un-send what already went out. follow if you want the next one of these before your bank emails you, low bar i know)
#Privacy