Revolut Bank admitted that attackers leaked confidential customer information after sending fake requests from legitimate government email domains. A limited number of users were affected, but the company did not disclose the exact number.
According to notifications received by affected customers, names and contact details, dates of birth, addresses, phone numbers and emails may have been leaked to third parties. We also discuss copies of passports and driver’s licenses and, in some cases, selfies for verification, account statements, and transaction history. Revolut said it discovered the scheme, blocked the addresses used and notified law enforcement, regulators and relevant agencies.
The company did not specify which government agency was imitated or which country the incident occurred. At the same time, Revolut stressed that its systems and customer funds were not affected. Cryptocurrency researcher Zacharias Haber said the attack likely targeted wealthy users.
The incident comes against the backdrop of Revolut’s aggressive global expansion and preparations for a possible stock exchange entry. The service is currently used by more than 80 million people, and the company’s potential IPO valuation could reach $200 billion.
