Revolut confirms data disclosure through spoofed official requests

Revolut confirmed that an unauthorized party used a legitimate government agency email domain to submit fraudulent information requests, leading the company to disclose customer data. The exposed material included dates of birth, addresses, email addresses, phone numbers and identity documents such as passports and driving licences. Revolut said its systems and customer funds were unaffected, and said it blocked the address, notified affected customers and contacted authorities and regulators. The company has not disclosed the number of affected customers, the markets involved or the agency whose domain was used.