Revolut Data Breach Linked to Fraudulent Government Requests

• •Fraudsters impersonated a government agency to obtain sensitive customer data.
• •Approximately 680 customers were affected, with no U.S. customers involved.
• •Revolut has taken steps to block the fraudulent email and alert authorities.

Revolut confirmed a data breach affecting a limited number of customers due to fraudsters posing as a government agency. The attackers utilized a legitimate government email domain to submit fraudulent requests for sensitive customer information, including passports, driver's licenses, and account details. The breach impacted approximately 680 customers, primarily in Europe, with no U.S. customers affected. Revolut has blocked the fraudulent email address and notified relevant authorities. The incident highlights vulnerabilities in compliance processes that may not adequately verify the legitimacy of data requests. A ransom demand of $3 million was made by a group claiming responsibility for the attack. The company has not disclosed how it detected the fraud or the specific government agency involved.