57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
57
Revolut Data Breach Exposes Customers’ Passport Copies and Full Transaction Histories to Hackers
Revolut leaked KYC documents and full transaction histories after a fraudulent, domain-authenticated email request impersonating a government agency.
Revolut disclosed that an attacker using an unauthorized email account on a legitimate government domain, with valid domain-authentication credentials, tricked the fintech into releasing customer data. The exposed data includes passport and driver's license copies, identity-verification selfies, full names, dates of birth, addresses, IBANs, and complete transaction histories including Bitcoin activity. Revolut says core systems, accounts, and funds were not compromised, and it blocked the email source and notified authorities. On-chain investigator ZachXBT and others indicated the operation targeted high-net-worth users facing elevated phishing, SIM-swap, and extortion risk.
62
Crypto customers targeted by scammers after email marketing provider breach
Attackers exploited a Brevo SAML SSO flaw to access 138 accounts and phish crypto customers of Trezor, CoinTracking, and BitBox.
An attacker exploited a flaw in Brevo's SAML SSO handling to access 138 customer accounts on September 10; six accounts were used to send phishing emails and contacts were exported from 43 accounts. Crypto firms Trezor, CoinTracking, and BitBox confirmed customers received phishing emails, with Trezor warning roughly 347,000 newsletter subscribers. The Trezor-themed email cited a fabricated STM32 microcontroller entropy bug and urged recipients to enter wallet backups through a malicious link. Exported contact lists could fuel future targeted phishing attacks.
75
57
57
57
57
57
57
57
57
57
57
‘White hat’ hackers take $47 million bounty after $320 million crypto theft
Hackers withdrew $320 million in bitcoin from Liquid Network, negotiated on-chain, returned $266.5 million and kept a $47 million reward.
Purported white-hat hackers withdrew 4,000 BTC (about $320 million) from Liquid Network's own wallet, one of the largest cryptocurrency thefts of 2026. Over roughly 12 hours of public on-chain negotiation with operator Blockstream, the hackers returned $266.5 million in bitcoin and kept 598.5 BTC (about $47 million), claiming it as a reward for uncovering a bug. Blockstream deployed updated software and paused deposits and withdrawals while experts traced the flaw to the Elements sidechain framework. April thefts of $290 million from Kelp and $280 million from Drift, attributed to North Korean hackers, were previously 2026's largest.
78
57
57
57
57
57
57
57
57
57