Revolut Data Breach: Your Files Are Public, and Here Is What You Can Do

When a copy of your ID document, your verification selfie and your complete Bitcoin transaction history all sit in one package in the hands of strangers, a new password achieves almost nothing. That has been the position of the Revolut customers who received a breach notification since September 14, 2026: the stolen documents have been published since the early hours of that day. Four things matter now. Establish in writing how far your own exposure goes. Close the routes through which a copy of an ID document turns into money. Take the link between your home address and your crypto holdings seriously. And enforce your rights against the bank while the deadlines are still running.

This piece builds on our first assessment. Whether you are among the affected customers at all, and what role your Bitcoin history plays in the incident, is covered in Revolut data breach: am I affected, and what about my Bitcoin history? from September 12. This article deals with the stage after that: the details are out, and that changes the question of what to do.

Revolut data breach: what to do now that the files are being published

Until the weeke...