Revolut Data Breach: Hackers Exploit Government Domain for Customer Info Theft

• •Attackers used a legitimate government email domain to exploit Revolut's compliance process.
• •Sensitive data of a few hundred customers, including identity documents, was leaked.
• •Revolut's IT systems and customer funds remain unaffected by the breach.

Revolut has confirmed a data breach where attackers used a legitimate government email domain to request sensitive customer information. The incident targeted high-net-worth individuals, leading to the exposure of personal data including identity documents and transaction details. Revolut stated that the breach was a result of a 'sophisticated external fraud attempt' and that the attackers exploited the bank's compliance mechanisms. Although the breach affected a few hundred customers, Revolut emphasized that its IT systems and customer funds remain secure. The company has blocked the fraudulent email address and reported the incident to law enforcement. The breach was discovered during a subsequent inquiry by Revolut to the government agency. The attackers have reportedly begun extorting victims by threatening to publish stolen data. Revolut is currently addressing the situation and has contacted affected customers directly.