Revolut Gave Customer Data to Scammers After Fake Government Requests

Hackread • September 12, 2026

Share: View original

This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot.

Verification successful. Waiting for hackread.com to respond

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Revolut Data Breach: Fraudulent Government Email Exposes Customer Information On September 11 and 12, 2026, Revolut disclosed sensitive customer data after falling victim to a sophisticated impersonation scam. An unauthorized party used a legitimate government agency's email domain to submit fraudulent requests for customer information, which Revolut mistakenly treated as valid. The exposed data includes full names, dates of birth, addresses, email addresses, phone numbers, copies of identity documents, verification selfies, IBANs, and complete transaction histories, including Bitcoin activity. Revolut has characterized the incident as limited in scope, primarily affecting high-net-worth individuals, but has not disclosed the exact number of impacted customers. The company has since blocked the fraudulent email address and notified relevant authorities. Importantly, no customer funds or login credentials were compromised. The incident has raised concerns about the security of KYC processes in the fintech sector. 100 sources 53

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)