Market Pulse: Revolut Leaks Customer Data to Hackers Posing as State Agency

Across major exchanges, the institution shared personally identifiable information from an unknown number of users after receiving a request from an unauthorized government email account.

The shared documents include identity details, ID and verification information, and financial statements, putting affected users at risk.

Revolut, a UK-based neobank, became the latest institution to inadvertently disclose client information to threat actors.

According to an email sent to customers, Revolut, which has a user base of over 70 million customers globally, shared personally identifiable information (PII) with unidentified threat actors who posed as a government agency.

The company reported that it delivered this data while it was complying with a request-for-information email that originated from an unauthorized address hosted on a domain.

“The communication carried genuine domain authentication credentials leading Revolut to fulfill the request under the reasonable belief that it was an authentic government agency request,” it stressed.

Revolut did not disclose the name of the institution allegedly involved.

Nonetheless, it did point out that the shared information included key details: names, dates of birth, occupations, postal addresses, email addresses, and telephone numbers, potentially risking the personal security of the customers involved in the leak.