Every Zipp story tagged #DataBreach, newest first.
About 100,000 customer-data items were exposed across 16 firms, but regulators have not disclosed how much came from either crypto business.
The hardware remained intact, but recovery-phrase reuse and trusted email infrastructure gave attackers paths around the device.
The 24-hour ultimatum, with customer records threatened for sale, turns a fintech security incident into an extortion clock that Revolut and its regulators are now racing.
The group targeted crypto-heavy customers using blockchain analysis, and 680 accounts had identity documents and transaction histories exposed in the breach.
Evin McMullen of Billions argues the real security crisis is not the $320 million exploit but the identity honeypots every exchange, on-ramp and wallet maker keeps filling, soon to be multiplied by…
The exposed files include passport details, home addresses and Bitcoin activity, and the attackers are now threatening publication unless a ransom is paid, with the UK ICO opening an investigation.
The 10,000 BTC demand is the headline number, but the breached records on high-profile Revolut clients are the real liability: legal exposure, regulatory scrutiny, and a blow to the fintech's…
Fraudulent record requests from a spoofed government email domain extracted KYC docs, IBANs and full Bitcoin transaction histories, a counterparty failure landing mid-US bank charter push.
No Bitcoin keys or funds were exposed, but names and delivery addresses can make recovery-word phishing look credible long after a wallet purchase.
Pairing verified identity with Bitcoin transaction histories turns customers into mappable onchain targets, exactly the risk compliance frameworks are supposed to prevent.
Possible exposure of identity, banking and Bitcoin records raises the stakes, even as the reported number of affected accounts appears limited so far.
A fraudulent government email passed Revolut's internal checks and walked off with the same KYC data the bank collected to verify customers.
The incident highlights the privacy risk of third-party fulfillment, while Trezor says its own systems and users' devices remain secure.
Hardware-wallet owners face phishing and physical-targeting risk as roughly 67,000 more records resurface from a vendor Trezor believed had purged them. The 90-day deletion policy did not hold.
The expanded exposure raises phishing and physical-security risks for hardware-wallet users, while Trezor says its own systems and hardware wallets remain secure.
The broader concern is third-party data handling, raising compliance and reputational pressure for crypto businesses beyond Trezor itself.
Sensitive KYC docs paired with public Bitcoin addresses turn a non-custodial service's privacy promise into a target list, with phishing and physical safety now the live threats.
The $100M in physical theft is the headline; the 40,000-record breach is the structural warning. Hardware-wallet security now means controlling what sits behind the device, not just the device itself.
Funds stayed safe, but national IDs and bank details now in circulation expose 200,000 customers to follow-on phishing, and the breach lands in a wave that already hit SafePal and Trezor.
A data breach that exposes 250,000 users' personal data does not read like a financial loss; it reads like a personal-security event, and the regulatory exposure that follows is now structural, not…
CryptoSlate
CoinTelegraph
CoinDesk
WuBlockchain
Crypto News
TheBlock