Revolut Confirms Data Breach After Fraudsters Fake Government Data Requests
TechNadu · x · 2026-09-14
Revolut has confirmed a data breach in which fraudsters allegedly used a legitimate government agency email domain to submit fake customer-data requests, bypassing verification.
Reportedly exposed data includes passports, verification selfies, account statements and transaction histories. The incident highlights how identity-impersonation social engineering (a BEC-style variant) can defeat request-verification processes at fintech companies.
More from Safety
- Frog and Toad meme nails the HSM paradox: keys stay safe, but compromised servers can still sign — rickasaurus · 2026-10-31
- Heads Of Security: paper pinpoints and rewires attention heads behind prompt injections — jonasgeiping · 2026-10-31
- House Democrats resolution: no bailouts for failing AI companies — your data goes to bankruptcy court — alex_verem · 2026-10-31
- Amazon Echo kills local voice storage: everything goes to the cloud from March 28 — alex_verem · 2026-10-31
- DOJ's first crackdown on AI-assisted "ghost students" seizes $750K+ in crypto — Ars Technica AI · 2026-10-31
- Researcher Finds 600+ Bugs in LLM Kernel Code; Claude Blocks Safety Analysis — pmddomingos · 2026-10-31