Revolut disclosed a data breach after it sent customer information to an attacker posing as a government agency, exposing sensitive identity and financial records. The company says the fraudulent request came from an unauthorized email account that used the real agency’s domain and passed email authentication checks, leading staff to treat it as legitimate. Exposed data includes names, dates of birth, addresses, phone numbers, passport or driver’s license copies, facial verification images, IBANs, account statements, withdrawal records, and full transaction history including Bitcoin activity; the number of affected customers was not disclosed.
Why it matters: Affected customers face heightened risks of identity theft, account targeting, and highly convincing follow-on scams because the stolen data includes government ID documents and detailed financial history. Revolut users should watch for impersonation attempts, review account activity, and be especially cautious of messages claiming to come from banks, regulators, or law enforcement.
Ionut Arghire
2026.09.17
95% relevant
This source substantially updates the same Revolut breach by adding that the campaign reportedly ran for about five months, may have affected roughly 680 high-value accounts, involved a compromised Italian government email account likely sourced from infostealer logs, and is now accompanied by a public $3 million ransom demand.
Ionut Arghire
2026.09.14
99% relevant
This article confirms the same Revolut incident and adds detail that the fraudulent request came from a legitimate government-agency email domain, that the attacker’s address was blocked, and that exposed data included IBANs, account statements, withdrawal records, and full transaction histories including Bitcoin.
2026.09.14
99% relevant
This is the same underlying event and provides fuller reporting on the incident, including that Revolut confirmed the requests came from a legitimate government-domain email account, that the victims appear to include high-net-worth crypto-linked customers, that extortion demands were allegedly made, and that some leaked fields included passport and driver’s license copies, verification selfies, IBANs, bank statements, withdrawal records, and Bitcoin transaction history.
Sergiu Gatlan
2026.09.14
100% relevant
This article appears to be the first tracked report of Revolut’s newly disclosed 2026 breach caused by a spoofed government-agency request.
← Back to all stories