British fintech giant Revolut has confirmed a security breach that exposed sensitive customer information following fraudulent requests sent from a legitimate government agency email domain. The sophisticated impersonation scam allowed unauthorized parties to obtain private user files.
Notifications sent to affected clients reveal that compromised data includes names, contact details, dates of birth, passport and driver’s license copies, account statements, and verification selfies. Revolut stated that a limited number of users were impacted, emphasizing that customer funds and core internal systems remain completely unaffected by the incident.
The breach surfaces as the company pursues global expansion and weighs a major public listing. Revolut has blocked the fraudulent email address, notified law enforcement, and alerted relevant financial regulators while directly reaching out to the specific customers whose accounts were targeted.
- Sensitive customer data exposed through fraudulent government agency emails.
- Exposed records include IDs, contact info, and verification documents.
- Revolut confirms customer funds and core systems are entirely secure.
- Regulatory authorities and affected users have been formally notified.
Sources: