Revolut Exposes Customer Data in Sophisticated Scam

Revolut, the British fintech firm, disclosed to TechCrunch that it exposed sensitive customer information after receiving a fraudulent request from an email domain claiming to be from a legitimate government agency. The company described the incident as a 'sophisticated external impersonation scam' and said its systems and customer funds remained unaffected.

The affected customers received emails on Friday, according to Revolut's spokesperson, who added that a limited number of customers were impacted. The information disclosed may have included names, dates of birth, postal and email addresses, telephone numbers, identity documents, verification selfies, account statements, and transaction histories, including Bitcoin transactions.

Revolut has contacted the affected customers directly and alerted the relevant government agency, law enforcement, data protection authorities, and financial regulators. The company's expansion plans into banking and crypto operations may be impacted by this incident, as it seeks to establish a national bank in the United States and expand its stablecoin services.