The "upload passport scan + all kyc info -> leak everything on internet" pipeline is going strong.
The entire thing really pisses me off. There are NO consequences to any politician for any of this. The entire banking secrecy act needs to be scrapped.
From my background in security/monitoring, The worrying part isn’t just the leak itself — it’s that Revolut didn’t detect it early. In monitoring/ARC work, the biggest failures usually come from delayed detection rather than the breach event. Curious what controls Revolut actually had in place here.
The "upload passport scan + all kyc info -> leak everything on internet" pipeline is going strong.
The entire thing really pisses me off. There are NO consequences to any politician for any of this. The entire banking secrecy act needs to be scrapped.
I totally agree—or better yet, opt out of the system and use parallel solutions.
"KYC: Kill Your Customer".
Nice wordplay, I will reuse it.
Missed opportunity to include records of the nearest wrench supplier for each customer.
Thats why I try to avoid kyc completely
"While the incident is likely limited in size it seems to have been targeted at high net worth users."
Oh boy.
This is really bad. Tchernobyl comes to mind...
https://twiiit.com/LefterisJP/status/2098664847432921272
From my background in security/monitoring, The worrying part isn’t just the leak itself — it’s that Revolut didn’t detect it early. In monitoring/ARC work, the biggest failures usually come from delayed detection rather than the breach event. Curious what controls Revolut actually had in place here.
deleted by author