DriveWealth Data Breach Exposes Revolut Customer Information

• •DriveWealth experienced a data breach affecting Revolut customers due to social engineering.
• •Exposed data includes names, email addresses, and employment details, but not financial information.
• •This incident marks the second data breach for Revolut customers in September 2026.

A data breach at DriveWealth, a U.S. brokerage firm, occurred on September 4-5, 2026, due to a social engineering attack. The breach compromised personal data of Revolut customers, including names, email addresses, phone numbers, and employment details. While the breach did not affect financial information or passwords, it exposed historical records of customers who traded U.S. stocks before December 2023. Revolut and other platforms using DriveWealth's services, such as Stake and Hatch, confirmed that their systems were not compromised. Both companies have communicated with affected customers, advising vigilance against potential phishing attempts. This incident follows a previous breach involving Revolut's systems earlier in September, raising concerns about the security of third-party providers. The exact number of affected individuals has not been disclosed.