Fintech company Revolut confirmed a data breach involving unauthorized access to sensitive customer information. The incident occurred after the company received fraudulent requests from an email domain masquerading as a government law enforcement agency.
The exposed data includes customer names, residential addresses, email addresses, phone numbers, and copies of identification documents such as passports, driver's licenses, and national ID cards. Revolut stated that its internal systems and customer funds remain unaffected by the breach.
Following the discovery, the company blocked the malicious email address and notified relevant government bodies, data protection authorities, and financial regulators. Revolut, founded in 2015 and headquartered in London, operates as a digital financial services provider with banking licenses in the UK, France, and Lithuania.
