Revolut confirms sensitive customer data breach, falling for fake government requests
- Revolut disclosed customer identities and financial records, including Bitcoin transaction histories, after acting on a fraudulent request that appeared to come from a government agency.
- The request arrived from an unauthorized email account using an official government agency's domain; it passed authentication checks, leading staff to believe the communication was genuine.
- Disclosed records included full names, dates of birth, occupations, identity documents, and Bitcoin transaction histories, though the company confirmed biometric facial telemetry data was not involved.
- On Friday, on-chain investigator ZachXBT shared a customer notice on Telegram, though the company has not confirmed the total number of affected users.
198 Articles
198 Articles
The neobank responded to what it believed to be a legal request from a government administration, including copies of identity documents. The scammers had actually used a real e-mail address of the usurped agency.
Revolut facing ransom request after hackers obtain customers' data
Revolut hackers are threatening to release stolen customer data unless the fintech pays a ransom, after the company inadvertently handed over a trove of users’ private information over the weekend. The digital banking giant said a “very limited” number of customers were affected by the breach, which compromised data including customers’ identity documents, postal and email [...]
Reformatorisch Dagblad
A “limited number” of Revolut customers have been affected by a recent fraud attempt at the online bank. In this incident, an unauthorized party used the email address of “a legitimate government agency” to submit fraudulent requests for information. A spokesperson for the online bank confirmed this following an investigation by BNR Nieuwsradio.
Revolut, a UK financial services group licensed to operate in Lithuania, has confirmed that a “limited” number of customers’ confidential information was exposed in a phishing attack in which a third party acting illegally used a legitimate government email domain, Bloomberg News reported.
The emails came from the real domain of a public agency. Among the information on identity documents, selfies, IBAN and transaction history. It is not known whether Italian customers are involved
Coverage Details
Bias Distribution
- 51% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
