Revolut Data Breach: Customers Targeted by Fake Official Email

Revolut has confirmed a data breach involving a limited number of customers. An unauthorized third party sent a fraudulent request from a legitimate government email domain, which led the financial platform to release sensitive user information. The company states that the incident involved an impersonation attack, and they blocked the sender as soon as the error was detected.

While Revolut maintains that customer accounts and funds remain secure, the leaked files included personal documents. Affected users had their passports, home addresses, bank statements, and Bitcoin transaction histories exposed. The bank claims that login credentials, passwords, and biometric data were not compromised during this event.

This incident highlights the risks associated with Know Your Customer protocols, as holding large amounts of sensitive data creates a target for attackers. While the bank is working with law enforcement and regulators, the exposure of permanent identification documents creates a long term security risk for those impacted. Investigators have noted that the attack appeared specifically targeted toward wealthy account holders.

Moving forward, the primary concern is the identity security of the affected individuals. Because passport information cannot be changed like a password, those involved will likely face ongoing phishing attempts and security threats. The company has contacted all affected users, but the identity of the government agency whose domain was used remains under police investigation.