Personal, Financial Info Exposed in Revolut Data Breach
Source SecurityWeek
Description
Revolut, a British fintech company, experienced a data breach where personal and financial information of a subset of users was exposed to a third party impersonating a government agency. The attacker used a legitimate government agency domain email to submit fraudulent information requests, which were mistakenly treated as authentic. Exposed data included personally identifiable information such as names, addresses, dates of birth, copies of identification documents, and financial details including IBANs and transaction history. Revolut confirmed the breach, blocked the attacker’s email, and notified relevant authorities. The breach affected only a limited number of users, and Revolut’s systems and customer funds remain secure.