A targeted social engineering attack, where an actor impersonated a government agency using a legitimate domain email, resulted in unauthorized access to sensitive Revolut customer data. The compromised information includes dates of birth, contact details, and copies of identity documents. Revolut has confirmed the incident and directly notified the affected customers.
Someone impersonating a government agency, using an email address on that agency’s domain, obtained sensitive customer records from Revolut. The bank confirmed the incident on Saturday, September 12. The London-based fintech told TechCrunch that a limited number of customers were affected and that it had contacted them directly. The notification Revolut emailed affected customers listed birth dates, postal and email addresses, phone numbers, and copies of identity documents such as passports and driving licences. Verification … More → The post What we know about the Revolut data breach so far appeared first on Help Net Security .