Revolut Confirms Customer Data Disclosure After Fraudulent Information Requests
Summary
Revolut confirmed an unauthorized party obtained sensitive customer information through fraudulent requests sent from a legitimate government agency email domain. The data reportedly affected about 700 customers and samples later circulated online.
Key points
- Revolut said an unauthorized third party used fraudulent information requests sent from a legitimate government agency email domain.
- The exposed information reportedly included identity and contact details, dates of birth, addresses, and KYC materials such as selfies, passports, and driver’s licenses.
- Revolut described the number of affected customers as limited and said it contacted them directly; further reporting put the figure at about 700.
- Data samples and documents claiming to be linked to Revolut circulated through Telegram and file-sharing services.
- More than one actor claimed responsibility, and their accounts of the breach differed.
- A researcher relayed an actor’s claim that access to Italian law enforcement departments was used to send the requests; the article does not confirm that claim.
Article Details
- Victim Organization
- Revolut
- Incident Type
- Unauthorized disclosure of sensitive customer information following fraudulent information requests sent using a legitimate government-agency email domain.
- Disclosure Date
- 2026-09-14
- Data Types Exposed
- Customer identity information
- Contact details
- Dates of birth
- Addresses
- Email addresses
- Phone numbers
- KYC images, including selfies and identity documents
- Passports
- Driver’s licenses
- Account information, including financial data
- Affected Records
- Approximately 700 customers reportedly affected; Revolut described the number as limited.
- Operational Impact
- Revolut confirmed that sensitive customer information was disclosed to an unauthorized third party. The article reports no service disruption.
- Ransom Or Extortion
- The channel claimed more data was forthcoming and shared samples, but the article reports no price or ransom demand.
- Claim Status
- confirmed