Exclusive: Revolut customers hit by fresh security breach

Customers of Irish fintech company Revolut are among those affected by a data breach at third-party provider DriveWealth. The US broker, which executes US stock trades for Revolut users, disclosed that unauthorized access occurred to historical personal information of certain DriveWealth clients.

Revolut is liaising closely with DriveWealth to ascertain the full extent of the incident. According to a company email, DriveWealth's historical personal data that could be compromised includes customer profile information like names, email addresses, phone numbers, postal addresses, and employment data. Additionally, biographical data such as country of citizenship, age, and gender, as well as partial DriveWealth account numbers, may have been accessed.

However, Revolut has not detected any other personal information being compromised, notably passwords or financial payment details like credit card or bank account information.

Revolut emphasized that its systems and infrastructure remained untouched by the breach, and customer funds and investments are secure. Neither Revolut passwords, passcodes, card details, nor ID documents were exposed. The company clarified that in Europe, the impact pertains to historical records dating back before the implementation of a new US stock trading model, which took place between December 2023 and June 2025, depending on the market.

Since then, individual customer data in these regions has not been shared with DriveWealth, rendering them unaffected.

DriveWealth has personally contacted affected customers and followed up with an email explaining the implications. If a recipient has not received such an email, they are not impacted, according to Revolut.