Yay KYC and AML laws!

I wouldn't be surprised if other neobanks as well as regular banks have been affected too, potentially without noticing.

So this is obviously terrible stuff, but for once I feel that the leaking party isn't the only one at fault here. Seems like a government agency (shocker) was breached first, and then thus breach was used to appear more legitimate in the next attack.

Does the UK government not do cryptographically signed emails?

Well-known crypto security researcher ZachXBT posted about Revolut’s email to its affected customers late on Friday. The researcher said the incident appeared to have been targeted at high net worth users.

Well, at least I’m safe from this one