British fintech company Revolut reported a data breach affecting a limited number of its customers. The incident occurred after an unauthorized third party utilized a legitimate government email domain to conduct a scam.
The exposed information includes personal contact details, such as birth dates, physical and email addresses, and phone numbers. Attackers also accessed sensitive identity documents, including passports, driver licenses, transaction histories, and verification selfies.
Revolut stated that it blocked the malicious email address upon discovery. The company notified relevant government agencies, financial regulators, law enforcement, and data protection authorities regarding the security incident.
The company confirmed that its internal systems and customer funds remain unaffected by the breach. Revolut has initiated direct contact with the impacted individuals to provide necessary support and information.
