Revolut confirms customer data breach through fake government requests

British fintech Revolut confirmed that it disclosed delicate lawsuit accusation to an unauthorized 3rd enactment aft receiving fraudulent requests sent from a morganatic authorities bureau email domain.

The exposed information included customers’ individuality and interaction details, including their commencement date, postal and email addresses, and telephone numbers, arsenic good arsenic copies of their individuality documents including passports and driver’s licenses, according to a notification emailed to affected customers and reviewed by TechCrunch. The information whitethorn person besides included verification selfies, relationship statements, and transaction histories, the steadfast said successful its notification.

A Revolut spokesperson confirmed to TechCrunch that a “limited” fig of customers were impacted and said the institution had contacted those customers directly. Revolut, however, did not disclose the nonstop fig of impacted individuals. It besides did not reply whether the incidental was constricted to a circumstantial marketplace and declined to disclose the authorities bureau involved.

“Revolut precocious identified a blase outer impersonation scam wherever an unauthorised 3rd enactment utilised a morganatic authorities bureau domain email to taxable fraudulent requests for information,” the spokesperson said.

Revolut told TechCrunch that it blocked the email code aft discovering the scam from the unauthorized 3rd enactment and alerted the applicable authorities agency, instrumentality enforcement, and applicable regulators, adding, “Revolut systems and lawsuit funds are unaffected.”

London-based Revolut has more than 80 cardinal customers globally and operates arsenic a slope successful much than 30 countries, per its website. The fintech precocious expanded its presence successful markets including India, Mexico, France, and the UAE. Moreover, earlier this month, the U.S. Office of the Comptroller of the Currency granted a conditional support to Revolut to acceptable up a nationalist slope successful the country, which the steadfast expects to motorboat successful the archetypal fractional of 2027.

Well-known crypto information researcher ZachXBT posted astir Revolut’s email to its affected customers precocious connected Friday. The researcher said the incidental appeared to person been targeted astatine precocious nett worthy users.

The incidental comes arsenic Revolut reportedly weighs a imaginable nationalist listing that could worth it astatine as overmuch arsenic $200 billion, up from its $75 cardinal backstage valuation successful November. The fintech has besides been expanding its banking footprint successful Europe and globally, securing banking licenses successful France and the UK successful caller months.