Revolut Data Breach Exposes Millions of Customers' Sensitive Information

Digital banking giant Revolut is facing a significant security crisis after sensitive data belonging to millions of its customers was leaked. The breach was not a result of a typical hacking attempt but rather a sophisticated social engineering scheme. Attackers exploited Revolut's internal processes by submitting fraudulent information requests, disguised as official inquiries, through a verified email address belonging to a government authority. Revolut confirmed that unauthorized parties gained access to personal information, including passport photos, driver's licenses, bank account details (IBANs), and cryptocurrency transaction histories.

Despite the severity of the exposed data, Revolut has stated that customer passwords, biometric data, and funds remain secure. Security experts suggest this was a targeted attack aimed at high-net-worth individuals to build precise financial profiles, rather than a random phishing attempt.

This incident occurs at a critical juncture for Revolut's expansion into Israel. The company, which serves over 80 million customers globally and is valued at approximately $115 billion, is currently seeking a "light bank" license from the Bank of Israel. While the immediate impact on Israeli customers is minimal as Revolut has not yet officially launched operations there, the data breach could lead to stricter regulatory scrutiny from Israeli banking supervisors.

The Israeli Ministry of Finance had hoped that Revolut's entry would foster competition within the local banking sector. However, the ease with which sensitive data was compromised due to a fake government credential may now complicate the company's licensing process and lead to more stringent requirements.