Revolut says a fraudulent request from a government-domain mailbox exposed sensitive customer KYC files and full transaction histories, including Bitcoin.