Revolut confirms sensitive customer data breach after fake government requests

Sept 12 (Reuters) – British fintech Revolut confirmed on Saturday that sensitive customer information was disclosed to an unauthorized third party after it received fraudulent requests from a legitimate government agency email domain.

Here are a few details:

• Revolut said in a statement that the breach affected a “very limited” number of customers, who had been notified by the company. It did not give further details.

• “Revolut systems and customer funds are unaffected,” a spokesperson for the company said, without disclosing the exact number of individuals affected by the breach.

• “Upon detection, we immediately blocked the address and alerted the relevant government agency as well as enforcement agencies, data protection, and financial regulators,” the spokesperson said.

• The compromised data included customers’ birth date, postal and email addresses, and phone numbers, as well as copies of their identity documents including passports and driver’s licenses, according to a TechCrunch report.

• Revolut is planning for a potential public listing and aiming for a valuation of up to $200 billion.

• It is one of the most successful European fintech companies, with no physical bank branches.

(Reporting by Sumedha Mukherjee in Bengaluru; editing by Philippa Fletcher)