Revolut: Forged Government Emails Lead to Sensitive Data Breach for Some Users
TechFlow reports that on September 13, according to Cointelegraph, fintech and banking services giant Revolut recently disclosed a complex external impersonation scam. An unauthorized hacker exploited seemingly legitimate government agency domain email addresses to submit unauthorized customer information inquiry requests and successfully bypassed Revolut's identity verification process.
In this data breach incident, sensitive personal information belonging to some users was illegally accessed, encompassing copies of identification documents, facial recognition selfies, and complete financial transaction histories. The International Cyber Digest noted that the spoofed requests initially went undetected by the system due to the use of authentic government agency domain suffixes.
Regarding this incident, a Revolut spokesperson confirmed to media that the company swiftly blocked the associated addresses upon detecting the suspicious activity and issued alerts to relevant government agencies, law enforcement, and financial regulatory bodies. The spokesperson explicitly stated that "Revolut's system architecture and customer funds remain unaffected." Currently, the small number of affected users have been directly contacted and provided with appropriate support and guidance.
