Personal, Financial Info Exposed in Revolut Data Breach
Revolut, a UK-based fintech company, suffered a data breach where a third party impersonating a government agency gained access to a subset of user data, including personal details and financial information like Bitcoin transaction history. The company is notifying affected users and taking steps to contain the breach, but the exact number of impacted users remains undisclosed.
Revolut, a British fintech company serving over 80 million users globally, has been notified of a data breach. The incident involved a sophisticated external impersonation scam, where a third party fraudulently posed as a government agency to obtain user information. Specifically, the attackers utilized a legitimate government agency domain email to submit requests for data, including names, addresses, phone numbers, email addresses, dates of birth, occupation, copies of driver’s licenses, and passports. Furthermore, the breach exposed sensitive financial details, such as IBANs, account statements, withdrawal records, and full transaction history, including Bitcoin transactions. Revolut confirmed the incident and stated that their systems and customer funds remain unaffected. The company has blocked the attackers’ email address and notified relevant government agencies and regulatory bodies. Only a limited number of users were impacted, but the exact figure is not being disclosed. Revolut is proactively contacting affected users and providing support.