Revolut Data Breach: Fraudulent Government Email Exposes Customer Information

• •Revolut disclosed sensitive customer data due to a fraudulent government email request.
• •The exposed data includes identity documents and complete transaction histories, including Bitcoin.
• •No customer funds were compromised, and the breach primarily affected a limited number of high-net-worth individuals.

On September 11 and 12, 2026, Revolut disclosed sensitive customer data after falling victim to a sophisticated impersonation scam. An unauthorized party sent a fraudulent data request using a legitimate government agency's email domain, which passed all security checks. The exposed information includes full names, dates of birth, addresses, email addresses, phone numbers, identity documents, verification selfies, IBANs, and complete transaction histories, including Bitcoin activity. Revolut has stated that the number of affected customers is limited, primarily targeting high-net-worth individuals. No passwords, PINs, or biometric data were compromised, and customer funds remain unaffected. The company has alerted relevant authorities and blocked the fraudulent email address. Notifications to affected customers began on September 11, 2026.