Elite Data Exposed: Revolut’s Security Shock!

Hustler Words – British fintech behemoth Revolut has officially acknowledged a significant security incident, revealing that sensitive customer data was inadvertently released to an illicit third party. The breach stemmed from highly sophisticated, deceptive requests that originated from what appeared to be a legitimate government agency’s email domain, lending an air of authenticity to the fraudulent communication.

Information compromised in the incident encompasses a broad spectrum of personal identifiers. Affected users’ identity and contact specifics, such as birth dates, physical and digital addresses, and telephone numbers, were exposed. Furthermore, copies of crucial identity documents, including passports and driver’s licenses, were part of the disclosure. The company’s notification to impacted individuals, seen by Hustler Words, also indicated that verification selfies, account statements, and transactional histories might have been compromised.

A spokesperson for Revolut confirmed to Hustler Words that a "select" group of customers was affected, stating that the company has directly informed those individuals. However, the exact count of compromised accounts remains undisclosed, as does whether the breach was confined to a particular geographical market or the identity of the government agency whose domain was exploited. The spokesperson characterized the event as "a sophisticated external impersonation scam where an unauthorized third party utilized a legitimate government agency domain email to submit fraudulent requests for information."

Upon detecting the deceptive scheme from the unauthorized entity, Revolut promptly blocked the offending email address. The fintech giant further stated to Hustler Words that it has notified the pertinent government agency, law enforcement bodies, and relevant regulatory authorities. Crucially, the company asserts that "Revolut systems and customer funds are unaffected," aiming to reassure its vast user base.

Headquartered in London, Revolut boasts a formidable global presence, serving over 80 million customers and operating as a licensed bank in more than 30 nations. The company has been aggressively expanding its footprint, recently establishing operations in key markets such as India, Mexico, France, and the UAE. This incident unfolds as Revolut also secured conditional approval from the U.S. Office of the Comptroller of the Currency earlier this month to establish a national bank in the United States, with a planned launch in early 2027.

The incident gained public attention following a post by prominent crypto security researcher ZachXBT late on Friday, who shared details from Revolut’s communication to its affected clientele. ZachXBT suggested that the breach might have specifically targeted high-net-worth individuals, indicating a potentially sophisticated selection process by the attackers.

This security lapse emerges at a sensitive juncture for Revolut, as the fintech is reportedly exploring a potential public listing that could see its valuation soar to an estimated $200 billion, a significant jump from its $75 billion private valuation in November. The company’s ongoing expansion, including securing banking licenses in France and the UK, underscores its ambitious growth trajectory, making the timing of this data exposure particularly challenging.