Revolut confirms sensitive customer data breach after fake government requests

British fintech Revolut confirmed on ​Saturday that sensitive ​customer information was disclosed to an ​unauthorized third party after it received fraudulent requests from a legitimate government agency email domain.

Here are ‌a few ⁠details:

⁠Revolut said in a statement that the breach ​affected a "very limited" number of customers, who had been ​notified by the company. It did not give further details.


"Revolut systems and customer ​funds are unaffected," a spokesperson ⁠for the ‌company said, without disclosing ​the exact ​number of individuals affected by ⁠the breach.

"Upon detection, we immediately blocked the ​address and alerted the relevant ​government agency as well as enforcement agencies, data protection, and financial regulators," the spokesperson said.

The compromised data included customers' birth date, postal and email addresses, ‌and phone numbers, as well as copies of their identity documents ​including passports ​and driver's ⁠licenses, according to a TechCrunch report.

Revolut is planning for a potential public listing and aiming ​for a valuation of up to $200 billion.

It is one of the most successful European fintech companies, with no physical bank branches.