British fintech Revolut confirmed on 12 September 2026 that a limited number of customers had sensitive information disclosed after an unauthorized third party submitted fraudulent requests using a legitimate government agency email domain. Exposed data included passports, identity documents, and contact information.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
⚠️📢 🫴🤝 Revolut handed sensitive customer data to scammers after fraudulent government requests were sent through a legitimate government agency email domain. The exposed data included passports, verification selfies, IBANs and Bitcoin transaction records. Listen/Read: https:// hackread.com/revolut-gave-cust omer-data-to-scammers-fake-requests/ # Cybersecurity # Revolut # DataBreach # Privacy #
British fintech Revolut confirmed that sensitive customer information was disclosed to an unauthorized third party after it received fraudulent requests sent from a legitimate government agency email domain, a spokesperson for the company told Reuters on Saturday. https://www. reuters.com/legal/litigation/r evolut-confirms-sensitive-customer-data-breach-falling-fake-government-requests-2026-09
Revolut Ltd. said a “limited number” of customers had sensitive information disclosed in a scam involving an unauthorized third party that used a legitimate government email domain.
Revolut confirmed a # databreach after an unauthorized third party used a legitimate government agency email domain to submit fraudulent information requests. Exposed data included identity and contact details, passports, driver’s licenses, and potentially selfies, statements, and transaction histories. https:// techcrunch.com/2026/09/12/revo lut-confirms-customer-data-breach-through-fake-governme
Revolut Discloses Sensitive Customer Data Following Fraudulent Government Requests Revolut confirmed a data breach on September 12, 2026, after disclosing sensitive customer information to an unauthorized third party posing as a government agency. The attackers used a legitimate government email domain to send fraudulent data requests that bypassed the company's verification checks. **** # cyberse