Data from some Revolut customers was leaked

The British fintech startup Revolut has acknowledged that it disclosed confidential customer data to an unauthorized third party after receiving fraudulent requests from an email domain belonging to a real government agency, according to TechCrunch.

The data breach affected customers’ personal and contact information—dates of birth, mailing addresses, and email addresses, phone numbers, as well as copies of identification documents, including passports and driver’s licenses, according to a notification sent by Revolut to affected customers and obtained by TechCrunch. In the notification, the company also stated that the attackers may have gained access to verification selfies, account statements, and transaction histories.

The incident appears to have targeted Revolut's high-net-worth clients, according to ZachXBT, a well-known cryptocurrency security researcher, who posted information about a notification sent to affected customers.

The incident affected a “limited” number of customers, a Revolut spokesperson told the publication, without disclosing the exact number of those affected. The spokesperson also did not specify whether the incident was limited to a single market and declined to name the institution on whose behalf the scammers sent the requests. Revolut reported that it had blocked the email address used by the attackers and notified the institution itself, as well as law enforcement agencies and regulators. The company emphasized that its systems and customers’ funds were not compromised.

Revolut serves more than 80 million customers worldwide and operates as a bank in more than 30 countries, according to its website. Recently, the company has expanded its presence in India, Mexico, France, and the UAE, and in early September, the U.S. Office of the Comptroller of the Currency (OCC) granted it conditional approval to establish a national bank in the U.S.—which is expected to launch in 2027.

The incident occurred amid discussions about Revolut’s potential initial public offering. In April, Revolut founder Nikolay Storonsky stated in an interview on Bloomberg’s *The David Rubenstein Show* that the company would go public, but not before 2028. According to Financial Times sources, Revolut is aiming to increase its valuation to $200 billion before going public. In July, Revolut launched a new round of secondary sales of employee shares, valuing the company at $115 billion.

Earlier in 2026, Revolut faced regulatory challenges: the European Central Bank temporarily restricted the expansion of the company’s European division’s product line due to concerns about the speed at which new services were being brought to market, and the Italian antitrust regulator fined the bank €11.5 million for misleading advertising of investment products.

This article was AI-translated and verified by a human editor