Revolut has committed to covering the costs for new identity documents for customers affected by a September data breach. The company is providing direct support to 680 individuals whose sensitive information was compromised during the incident.

The breach occurred when an unauthorized third party used a legitimate government email domain to conduct a scam, leading to the exposure of personal details including birth dates, contact information, passports, driver’s licenses, and transaction histories.

Following the discovery of the scheme, Revolut blocked the malicious email address and notified relevant government agencies, financial regulators, and law enforcement. The company confirmed that its internal systems and customer funds remain unaffected by the incident.

Reports indicate that the company also faced extortion threats from a hacker who claimed responsibility for the breach and demanded a ransom. Revolut stated that it has alerted law enforcement regarding these threats but declined to provide further details.