What we know about the Revolut data breach so far
Revolut confirmed an impersonation scheme exposed high-net-worth customers' identity documents, IBANs, and transaction histories to an attacker.
Revolut confirmed on September 12 that someone impersonating a government agency, using an email address on that agency's domain, obtained sensitive customer records. Exposed data includes birth dates, postal and email addresses, phone numbers, passport and driving licence copies, verification selfies, account statements, and transaction histories; ZachXBT added that IBANs, withdrawal records, occupations, and bitcoin transaction history were also included. Revolut says a limited number of customers were affected, the sender's address was blocked, and its systems and customer funds were untouched, with law enforcement and regulators notified.
- Attacker impersonated a government agency via email to obtain customer KYC records
- Data includes passports, driving licences, selfies, IBANs, and transaction histories
- ZachXBT assesses limited scale but targeting of high-net-worth users
- Revolut blocked the sender and alerted law enforcement, regulators, and the agency
From the original article
1 min read at helpnetsecurity.com
Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank confirmed the incident on Saturday, September 12. The London-based fintech told TechCrunch that a limited number of customers were affected and that it had contacted them directly.
By Mirko Zorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.