Revolut Reveals Customer Data Leaked in Email Scam

An email scam has reportedly resulted in the unauthorized disclosure of sensitive customer data belonging to Revolut, a British FinTech company. The breach occurred when an unauthorized third party exploited a legitimate government email domain, according to Bloomberg News. Revolut promptly blocked the suspicious address, notified the appropriate government agency, financial regulators, law enforcement, and data-protection officials, and directly informed the limited number of affected individuals about the incident.

Revolut spokesperson stated that the company's systems and customer funds remained unharmed. The leaked data included customers' identity and contact details, such as birth dates, postal/email addresses, and phone numbers. Furthermore, the scammers obtained customers' identity documents, including passports and driver’s licenses, and possibly accessed verification selfies, account statements, and transaction histories.

Recent research by PYMNTS Intelligence emphasizes the potential for businesses to enhance their fraud defenses by leveraging existing banking information more effectively. However, despite 57% of surveyed companies observing an increase in fraud attempts compared to the previous year, only 49% utilize such information for real-time fraud signals, highlighting a potential gap in protection mechanisms.