Revolut Data Breach: Impersonation Scam Exposes Customer Information

• •Revolut was tricked into providing sensitive data by hackers impersonating officials.
• •Approximately 680 customers' personal information was compromised in the breach.
• •Revolut has not received direct ransom demands despite hackers threatening to leak data.

Revolut, a digital banking platform, fell victim to a sophisticated impersonation scam where hackers posed as Italian government officials to obtain sensitive customer data. The attack involved fraudulent requests sent from a legitimate government email domain, leading Revolut to mistakenly provide personal information for approximately 680 users. The stolen data includes identification documents, account statements, and transaction histories. Although the hackers have threatened to leak the data unless a ransom of $3 million in Monero is paid, Revolut claims it has not received any direct ransom demands. The incident highlights vulnerabilities in how financial institutions verify legal requests from government entities. Revolut has since blocked the fraudulent email address and notified affected customers, but the incident raises concerns about the security of compliance processes in the financial sector.