
TL;DR
Revolut confirmed a data breach where sensitive customer information was disclosed to an unauthorized party via fraudulent government requests. The breach involved identity documents and personal details of a limited number of customers.
✦ Why It Matters
Review your data protection protocols to prevent similar impersonation scams in your organization.
Key Takeaways
Full Summary
Revolut, a British fintech company, reported a data breach involving unauthorized access to customer information via fake requests that appeared to come from a legitimate government email domain. The compromised data included personal identifiers such as birth dates, addresses, and identity documents like passports and driver's licenses.
Affected customers were notified directly, although Revolut did not disclose the exact number of individuals impacted. The company has since blocked the fraudulent email address and informed relevant authorities.
Despite the breach, Revolut stated that its systems and customer funds remain secure. This incident raises concerns about the security of customer data, especially as Revolut expands its global banking operations and prepares for a potential public listing.
Related