Revolut Confirms Data Breach Triggered by Fake Government Requests

Fintech giant Revolut has publicly confirmed a recent security incident that exposed a subset of its customers’ personal and financial data. According to the company’s statement, the breach was initiated through a counterfeit government request that appeared to be an official inquiry. The fake request convinced internal teams to release information, allowing cyber‑criminals to harvest sensitive details.

Upon discovering the anomaly, Revolut immediately alerted every customer whose data might have been compromised. A dedicated notification was sent via email and in‑app messages, outlining what information could be at risk and offering guidance on how to protect themselves moving forward. The company also launched an internal forensic investigation to map the full scope of the intrusion and to prevent further leakage.

Revolut has since coordinated with the appropriate governmental agency, law‑enforcement bodies, and financial regulators to share all relevant findings. Detailed reports describing the forged documents, the attack vector, and potential impact were submitted to ensure a coordinated response. In addition, Revolut announced that it is tightening its verification procedures for any external request that appears to come from public authorities, adding multi‑factor authentication and mandatory cross‑departmental approvals.

To mitigate the fallout for affected users, Revolut is providing complimentary identity‑theft protection services and a dedicated support line for any questions related to the breach. The firm reiterated its commitment to compliance with data‑protection regulations and promised ongoing transparency through regular updates. This episode underscores the growing sophistication of social‑engineering attacks on financial platforms and serves as a warning for the entire industry to reinforce its security safeguards.

Source: TechCrunch

ETİKETLER