Revolut Data Breach Exposes Customer Details Ahead of Israel Launch

British fintech firm Revolut, which boasts over 80 million customers globally, has reported a significant security incident where personal customer information was exposed. This breach occurs as the company is in the final stages of preparing for its official launch and full operation in Israel.

According to a notification sent to affected customers, an unauthorized external party gained access to sensitive data through a sophisticated phishing scheme. The attackers reportedly used an official government agency's email domain to submit fraudulent requests for information. The exposed details include identification and contact information such as birth dates, home addresses, email addresses, and phone numbers. Additionally, scans of official identification documents, including passports and driver's licenses, were compromised. Other data potentially accessed may include selfie verification photos, bank statements, and transaction histories.

A Revolut spokesperson clarified that a "limited" number of customers were affected and that the company has contacted them directly. Security researchers estimate the attack primarily targeted high-net-worth individuals.

Revolut emphasized that upon discovering the fraud, the email address used for the requests was immediately blocked. The company has also notified relevant law enforcement agencies and regulators. Revolut assures that its core systems and customer funds were not compromised in the incident.