Another week, another data breach for Revolut customers

Revolut customers experienced a second data breach this month when attackers employed social engineering tactics to infiltrate US brokerage DriveWealth and obtain personal data of Revolut users who traded US stocks. DriveWealth, which handled brokerage accounts for Revolut customers, revealed the unauthorized access took place on September 4 and 5.

In an email to affected customers, DriveWealth attributed the breach to a sophisticated social engineering campaign conducted by unknown third parties. The intruders obtained data from the time those customers held accounts directly with DriveWealth. This information included names, email addresses, phone numbers, postal addresses, employment details, country of citizenship, age, gender, and partial account numbers.

However, passwords, payment information, and other sensitive data remained untouched. DriveWealth advised customers to be wary of potential phishing attempts using the stolen data. Revolut confirmed its systems and customer funds were not compromised, but expressed concern over the potential for identity fraud and impersonation.

The fintech had already moved UK, EEA, and Australian Revolut customers away from the DriveWealth arrangement between December 2023 and June 2025. The current breach follows another incident on September 14 where Revolut disclosed sensitive customer information to criminals through a sophisticated external impersonation scam. These two separate events, involving different attackers and methods, have resulted in a month of data breach notifications for Revolut users.