AI News Feed
Market watch
Not All Router Ethernet Ports Are Interchangeable, Engadget Guide Says2026 Inclusion Bund Conference Closes With Over 50 Technology Debuts, 80-Plus Cooperation IntentionsManagers Use AI Coaching to Rehearse Difficult Pay and Performance TalksU.S. Stocks Slip on Inflation Fears as Oil and Bond Yields Climb; Meta and Apple AI Moves Draw FocusEngadget Guide Urges Buyers to Deep-Clean Secondhand Tech Before ReuseMeta releases Muse, its first consumer AI agent, as Engadget outlines setup and privacy steps
Not All Router Ethernet Ports Are Interchangeable, Engadget Guide Says2026 Inclusion Bund Conference Closes With Over 50 Technology Debuts, 80-Plus Cooperation IntentionsManagers Use AI Coaching to Rehearse Difficult Pay and Performance TalksU.S. Stocks Slip on Inflation Fears as Oil and Bond Yields Climb; Meta and Apple AI Moves Draw FocusEngadget Guide Urges Buyers to Deep-Clean Secondhand Tech Before ReuseMeta releases Muse, its first consumer AI agent, as Engadget outlines setup and privacy steps
Cybersecurity

Revolut confirms customer data breach through fake government requests

Revolut confirmed a customer data breach after fraudulent requests from a government email domain exposed sensitive identity and contact data; it says a limited number were affected.

AI News Feed · 2026-09-13 00:18

The exposed data included customers’ identity and contact details, including birth date, postal and email addresses, and phone numbers, as well as copies of identity documents such as passports and driver’s licenses, according to a notification emailed to affected customers and reviewed by TechCrunch. The notification said the data may also have included verification selfies, account statements, and transaction histories.

A Revolut spokesperson confirmed to TechCrunch that a “limited” number of customers were impacted and said the company had contacted those customers directly. Revolut did not disclose the exact number of affected individuals. It also did not answer whether the incident was limited to a specific market and declined to disclose which government agency was involved.

“Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information,” the spokesperson said.

Revolut told TechCrunch that it blocked the email address after discovering the scam and alerted the relevant government agency, law enforcement, and relevant regulators. “Revolut systems and customer funds are unaffected,” the spokesperson added.

The incident became more widely known after well-known crypto security researcher ZachXBT posted about Revolut’s email to affected customers late on Friday. ZachXBT said the incident appeared to have been targeted at high net worth users.

London-based Revolut has more than 80 million customers globally and operates as a bank in more than 30 countries, according to its website. The fintech recently expanded its presence in markets including India, Mexico, France, and the UAE. Earlier this month, the U.S. Office of the Comptroller of the Currency granted conditional approval to Revolut to set up a national bank in the country, which the firm expects to launch in the first half of 2027.

The incident comes as Revolut reportedly weighs a potential public listing that could value it at as much as $200 billion, up from its $75 billion private valuation in November. The fintech has also been expanding its banking footprint in Europe and globally, securing banking licenses in France and the UK in recent months.

Editor's Summary The breach exposed sensitive identity documents and contact details after fraudulent requests from a legitimate government email domain. Revolut said a limited number of customers were affected, blocked the email address and alerted authorities, while the company continues to expand and reportedly weighs a potential listing.