British fintech Revolut confirmed that it disclosed delicate buyer info to an unauthorized third social gathering after receiving fraudulent requests despatched from a legit authorities company e mail area.
The uncovered information included prospects’ id and make contact with particulars, together with their start date, postal and e mail addresses, and telephone numbers, in addition to copies of their id paperwork together with passports and driver’s licenses, based on a notification emailed to affected prospects and reviewed by TechCrunch. The information might have additionally included verification selfies, account statements, and transaction histories, the agency mentioned in its notification.
A Revolut spokesperson confirmed to TechCrunch {that a} “restricted” variety of prospects had been impacted and mentioned the corporate had contacted these prospects instantly. Revolut, nonetheless, didn’t disclose the precise variety of impacted people. It additionally didn’t reply whether or not the incident was restricted to a particular market and declined to reveal the federal government company concerned.
“Revolut not too long ago recognized a complicated exterior impersonation rip-off the place an unauthorised third social gathering utilised a legit authorities company area e mail to submit fraudulent requests for info,” the spokesperson mentioned.
Revolut instructed TechCrunch that it blocked the e-mail handle after discovering the rip-off from the unauthorized third social gathering and alerted the related authorities company, legislation enforcement, and related regulators, including, “Revolut methods and buyer funds are unaffected.”
London-based Revolut has greater than 80 million prospects globally and operates as a financial institution in additional than 30 nations, per its web site. The fintech not too long ago expanded its presence in markets together with India, Mexico, France, and the UAE. Furthermore, earlier this month, the U.S. Workplace of the Comptroller of the Foreign money granted a conditional approval to Revolut to arrange a nationwide financial institution within the nation, which the agency expects to launch within the first half of 2027.
Nicely-known crypto safety researcher ZachXBT posted about Revolut’s e mail to its affected prospects late on Friday. The researcher mentioned the incident appeared to have been focused at excessive web value customers.
The incident comes as Revolut reportedly weighs a possible public itemizing that would worth it at as a lot as $200 billion, up from its $75 billion personal valuation in November. The fintech has additionally been increasing its banking footprint in Europe and globally, securing banking licenses in France and the UK in current months.
If you buy by means of hyperlinks in our articles, we might earn a small fee. This doesn’t have an effect on our editorial independence.