Revolut Confirms Customer Data Breach Through Fake Government Request

Revolut confirmed on September 12 that an unauthorized third party used a legitimate government agency’s email domain to submit fraudulent requests for customer information, exposing identity documents and Bitcoin transaction activity in the process, according to TechCrunch.

The London-based fintech said a “limited” number of its more than 80 million customers were affected by what it described as a sophisticated external impersonation scam.

What the Breach Exposed According to a notification emailed to affected customers and reviewed by TechCrunch, the exposed data included identity and contact details such as birth dates, postal and email addresses, and phone numbers, as well as copies of identity documents including passports and driver’s licenses.

The information may have also included verification selfies, account statements, and transaction data.