A forged government email breached Revolut’s checks Friday.

Passports, addresses and full bitcoin histories reached whoever sent the fake request.

Revolut built emergency disclosure channels for speed, checking requesters’ credentials weakly.

Revolut has notified regulators and users, but the exposed data cannot be recalled.

Sources: CoinDesk