Revolut Confirms Customer Data Breach via Fake Government Requests
British fintech Revolut confirmed that it disclosed sensitive customer data to an unauthorized third party after falling victim to a sophisticated impersonation scam involving fraudulent requests from what appeared to be a legitimate government agency email domain. The affected information included identity documents, contact details, and potentially transaction histories for a limited number of customers. Although the exact number impacted remains undisclosed, Revolut stated it had directly contacted those affected and blocked the malicious email address involved in the incident. Revolut emphasized that its systems and customer funds were unaffected by the breach and reported the issue to relevant authorities including law enforcement and regulators. The company has over 80 million global customers and is expanding into new markets, having recently secured conditional approval from U.S. banking regulators for a national bank charter expected in 2027. The data breach comes amid reports that Revolut may be considering an IPO with potential valuations as high as $200 billion. The incident has drawn attention to the company’s security practices and could impact its public listing prospects.
