Revolut Discloses Major Data Breach After Attackers Impersonated Government Agency
Fintech company Revolut disclosed a major data breach in which attackers used social engineering to impersonate a government agency and gain access to customer data. Compromised information includes passports, selfies, financial records, and transaction histories.
Revolut, the London-based fintech company, disclosed a major data breach this week in which attackers used social engineering to steal sensitive customer information.
The attackers impersonated a government agency to trick Revolut employees into providing access to customer data. The compromised information includes names, home addresses, financial records, transaction histories including Bitcoin transactions, and government identification documents such as passports and driver's licenses.
Revolut did not disclose the number of customers affected. The company said it is working with law enforcement and has notified relevant regulators.
Social engineering attacks, in which criminals manipulate people rather than hacking systems directly, have become increasingly common. Security experts say they are often more effective than technical attacks because they exploit human trust rather than software vulnerabilities.
"This is a reminder that even companies with strong technical security can be compromised through their people," said one cybersecurity analyst. "Employee training and verification procedures are critical."
Revolut has more than 45 million customers globally and operates as a digital bank in multiple countries. The breach is one of the most significant security incidents in the fintech sector this year.
Customers who use Revolut are advised to monitor their accounts for unusual activity, change their passwords, and be alert to phishing attempts that may use their compromised personal information.
The U.S. Department of Justice separately opened an investigation this week into Nvidia's licensing deal with AI chip startup Groq, examining whether the transaction was structured to avoid antitrust review.
