Revolut says data on about 680 customers disclosed after spoofed government email

Revolut confirmed it disclosed customer information after fraudulent requests arrived from a legitimate government-agency email domain, according to reporting citing Reuters. About 680 customers were affected, and the company said its core infrastructure, databases and customer accounts were not hacked. Customer notices reviewed by TechCrunch said exposed material could include contact details, identity documents, verification selfies, account statements and transaction histories. Revolut said customer funds were unaffected and that it blocked the email source, notified authorities and contacted affected customers. Italy's postal police opened an investigation after the request was traced to a certified email account associated with the Reggio Calabria prefecture, ANSA reported. A public $3 million extortion deadline expired with no payment or record sale independently confirmed, and Revolut said it never received a ransom demand directly.