Phishing Campaign Targets Revolut Customers Following Data Breach

• •Revolut experienced a data breach affecting sensitive customer records.
• •Phishing texts targeting customers appeared shortly after the breach announcement.
• •The connection between the breach and phishing campaign remains uncertain.

Revolut disclosed a data breach affecting sensitive customer records, including identity information and account details. Shortly after the breach announcement, affected customers began receiving phishing texts that mimic legitimate communications from Revolut. The phishing messages, which appeared in the same conversation as official texts, prompted users to enter sensitive information on a fraudulent site. It remains unclear if the phishing campaign is directly linked to the breach or if it is an opportunistic attack exploiting the situation. Revolut has stated that only a 'limited' number of customers were affected and has contacted them directly. Security experts advise customers to be cautious and avoid clicking on links in unsolicited messages. The phishing domain was first scanned on September 14, just two days after the breach was made public. This incident highlights the risks associated with data breaches and the potential for subsequent phishing attacks.