Revolut Faces Customer Data Breach Due to Fraudulent Government Requests

Revolut, the London-based fintech giant, has confirmed that it fell victim to a sophisticated scam that led to the unauthorized disclosure of sensitive customer data. This breach occurred when an impersonator sent fake requests using an email domain associated with a legitimate government agency.

Details of the Data Exposure

The leaked information includes personal identification details such as customers' birth dates, postal and email addresses, and phone numbers. Additionally, copies of identity documents—like passports and driver’s licenses—were also compromised. In its notification to affected customers, Revolut mentioned that verification selfies, account statements, and transaction histories might also have been exposed.

Company Response and Impact

In a statement to TechCrunch, a Revolut spokesperson indicated that a "limited" number of customers were affected, although the company did not specify how many. The spokesperson assured that the company has taken steps to mitigate the issue by blocking the fraudulent email address and notifying the relevant authorities. Notably, Revolut emphasized that its systems and customer funds remain secure and unaffected by this incident.

As of now, the company is under scrutiny for not revealing the identity of the government agency involved or whether the breach was limited to specific markets. The incident has drawn attention from crypto security experts, who suggest that the breach may have been aimed at high-net-worth clients.

Source: techcrunch.com