Revolut confirms customer data breach through fake government requests

British fintech Revolut confirmed that it disclosed delicate customer accusation to an unauthorized 3rd statement aft receiving fraudulent requests sent from a morganatic authorities agency email domain.

The exposed information included customers’ personality and interaction details, including their commencement date, postal and email addresses, and telephone numbers, arsenic good arsenic copies of their personality documents including passports and driver’s licenses, according to a notification emailed to affected customers and reviewed by TechCrunch. The information whitethorn person besides included verification selfies, relationship statements, and transaction histories, the patient said successful its notification.

A Revolut spokesperson confirmed to TechCrunch that a “limited” number of customers were impacted and said the institution had contacted those customers directly. Revolut, however, did not disclose the nonstop number of impacted individuals. It besides did not reply whether the incident was constricted to a circumstantial marketplace and declined to disclose the authorities agency involved.

“Revolut precocious identified a blase outer impersonation scam wherever an unauthorised 3rd statement utilised a morganatic authorities agency domain email to taxable fraudulent requests for information,” the spokesperson said.

Revolut told TechCrunch that it blocked the email reside aft discovering the scam from the unauthorized 3rd statement and alerted the applicable authorities agency, rule enforcement, and applicable regulators, adding, “Revolut systems and customer costs are unaffected.”

London-based Revolut has more than 80 cardinal customers globally and operates arsenic a slope successful much than 30 countries, per its website. The fintech precocious expanded its presence successful markets including India, Mexico, France, and the UAE. Moreover, earlier this month, the U.S. Office of the Comptroller of the Currency granted a conditional support to Revolut to group up a nationalist slope successful the country, which the patient expects to motorboat successful the first half of 2027.

Well-known crypto information interrogator ZachXBT posted astir Revolut’s email to its affected customers precocious connected Friday. The interrogator said the incident appeared to person been targeted astatine precocious nett worthy users.

The incident comes arsenic Revolut reportedly weighs a imaginable nationalist listing that could worth it astatine as overmuch arsenic $200 billion, up from its $75 cardinal backstage valuation successful November. The fintech has besides been expanding its banking footprint successful Europe and globally, securing banking licenses successful France and the UK successful caller months.