Revolut Data Breach: Social Engineering Attack Exposes Customer Information

• •Approximately 680 Revolut customers were affected by the data breach.
• •The hacker used a compromised email from an Italian government agency to request sensitive data.
• •Revolut's compliance team mistakenly complied with the fraudulent request, believing it was legitimate.

Revolut has confirmed a data breach affecting approximately 680 customers due to a social engineering attack. The hacker, identified as 'IAmNotAVillain', exploited a compromised email account from an Italian government agency to request sensitive customer data. Revolut mistakenly complied with the fraudulent request, believing it to be legitimate. The exposed data includes names, bank account details, cryptocurrency wallet information, and copies of identity documents. The attack was conducted over a six-month period, during which the hacker used infostealers to gain initial access to the email accounts. Revolut has alerted affected users and relevant authorities, ensuring that customer accounts remain secure. The incident highlights the risks associated with social engineering and the importance of verifying the authenticity of requests.