Key facts
- Revolut confirmed a data breach after hackers obtained customer data via fraudulent government requests.
- Exposed data includes customer identity and contact details, copies of identity documents, and potentially transaction histories.
- The attackers are demanding a ransom and threatening daily data releases.
- Revolut stated that its systems and customer funds are unaffected.
- A limited number of customers were impacted and have been contacted directly.
- The incident involved an impersonation scam using a legitimate government agency email domain.
Fintech firm Revolut has confirmed a data breach occurred after hackers exploited a sophisticated impersonation scam, using a legitimate government agency email domain to submit fraudulent requests for customer information. The company stated that its systems and customer funds remain unaffected.
According to a notification reviewed by TechCrunch, the exposed data includes customers’ identity and contact details such as birth dates, postal and email addresses, and phone numbers. Copies of identity documents like passports and driver’s licenses may also have been compromised, along with verification selfies, account statements, and transaction histories. Passwords, card PINs, and cryptocurrency private keys were reportedly not affected.
A spokesperson for Revolut confirmed that a "limited" number of customers were impacted and that the company has directly contacted them. The firm has blocked the unauthorized email address, alerted the relevant government agency, law enforcement, and regulators.
On Friday, crypto security researcher ZachXBT posted about the incident, noting that the data breach appeared to target high-net-worth users. Screenshots shared online show partially obscured identity documents and customer verification photographs, with one alleged target named as Felix Romer, founder of crypto gambling platform Gamdom and marketplace Skins.com, whose know-your-customer file was reportedly included.
The incident comes as Revolut reportedly weighs a potential public listing and has been expanding its banking footprint globally.