Fraudulent Government Requests Led Revolut to Disclose Customer Data
Summary
Revolut says attackers impersonating a government body used fraudulent information requests to obtain sensitive data on a limited number of customers. The company says its production systems and customer funds were not affected.
Key points
- Attackers impersonated a government body and sent requests from an email address on a genuine government domain; Revolut provided information without verifying the requests.
- Data disclosed reportedly included personal details, identity documents, and financial records; some reports also cited verification selfies.
- The article says the attackers sought detailed information about high-net-worth clients, but Revolut has not disclosed the number of people affected or their locations.
- Revolut says its production systems and customer funds were not affected, and the attackers did not directly breach its systems.
- Exposed information could enable identity fraud, targeted phishing, or financial scams. The article raises physical-attack risks as a possibility, not a confirmed outcome of this incident.
- Revolut has not identified the impersonated government body or explained how the attackers obtained authorization for its email.
Article Details
- Victim Organization
- Revolut
- Incident Type
- Fraudulent information requests sent by attackers impersonating a government body resulted in unauthorized disclosure of customer data.
- Data Types Exposed
- Names
- Dates of birth
- Addresses
- Email addresses
- Phone numbers
- Passports
- Driving licenses
- Verification selfies and facial images (reported by some sources)
- Account statements
- IBANs
- Withdrawal records
- Transaction histories
- Affected Records
- A limited number of customers; exact number not disclosed.
- Operational Impact
- Revolut stated that its systems and customer funds were unaffected, and that attackers did not breach its production systems through a network attack.
- Ransom Or Extortion
- No ransom or extortion related to the incident was reported. The article warns that leaked information could enable physical coercion or downstream criminal activity, but does not report that this occurred.
- Claim Status
- confirmed