Tech news in 3 minutes

Revolut confirms customer data breach through fake government requests

3 d ago

**Revolut data breach: Fintech exposed customer IDs, passports, and selfies after fraudulent requests from legitimate government email domain** British fintech Revolut confirmed it disclosed sensitive customer information—including identity documents, birth dates, addresses, phone numbers, and verification selfies—to an unauthorized third party after receiving fraudulent requests sent from a legitimate government agency email domain. The breach, detailed in a notification to affected customers reviewed by TechCrunch, also may have exposed account statements and transaction histories. A Revolut spokesperson said a "limited" number of customers were impacted and that the company contacted them directly, but did not disclose the exact number, the specific market affected, or the government agency involved. Revolut blocked the email address upon discovery, alerted the relevant agency, law enforcement, and regulators, and stated that "Revolut systems and customer funds are unaffected." Crypto security researcher ZachXBT posted about the incident late Friday, noting it appeared targeted at high net worth users. The London-based fintech, which has over 80 million customers globally and operates as a bank in more than 30 countries, recently expanded into India, Mexico, France, and the UAE. Earlier this month, the U.S. Office of the Comptroller of the Currency granted conditional approval for Revolut to establish a national bank, expected to launch in the first half of 2027. The incident comes as Revolut reportedly weighs a potential public listing that could value it at up to $200 billion, up from its $75 billion private valuation in November. The fintech has also secured banking licenses in France and the UK in recent months.