Revolut Reports Data Breach Following Fraudulent Government Requests
British fintech company Revolut has confirmed that it inadvertently disclosed sensitive customer information to an unauthorized third party. This breach occurred after the company received fraudulent requests that appeared to originate from a legitimate government agency email domain.
The compromised data includes customers' identity and contact details, such as birth dates, postal and email addresses, and phone numbers. Additionally, the breach may have involved copies of identity documents, including passports and driver’s licenses, as well as verification selfies, account statements, and transaction histories. This information was detailed in a notification sent to affected customers, which was reviewed by TechCrunch.
A spokesperson for Revolut stated that a limited number of customers were impacted by this incident. However, the company did not disclose the exact number of individuals affected or whether the breach was confined to a specific market. The spokesperson emphasized that Revolut had identified a sophisticated external impersonation scam, where an unauthorized party used a legitimate government agency email to submit fraudulent requests for customer information.
Revolut's Immediate Response to the Breach
In response to the breach, Revolut has blocked the email address used in the scam and has alerted the relevant government agency, law enforcement, and financial regulators. The company reassured customers that its systems and customer funds remain unaffected by this incident.
Case Closed
Revolut, which is based in London, has over 80 million customers worldwide and operates as a bank in more than 30 countries. Recently, the fintech has expanded its presence in markets such as India, Mexico, France, and the UAE. Earlier this month, the U.S. Office of the Comptroller of the Currency granted Revolut conditional approval to establish a national bank in the United States, which is expected to launch in the first half of 2027.
The incident has drawn attention from cybersecurity experts, including well-known crypto security researcher ZachXBT, who noted that the breach seemed to target high net worth users. This data breach comes at a time when Revolut is reportedly considering a public listing that could significantly increase its valuation, potentially reaching up to $200 billion, compared to its previous valuation of $75 billion in November.
