An impersonator using an email address on a government agency’s domain tricked Revolut into releasing sensitive customer records, including identity documents and other personal details. Revolut said only a limited number of customers were affected, blocked the sender, and notified authorities after the external impersonation scam was discovered. #Revolut #ZachXBT
Keypoints
- An impersonator posed as a government agency to obtain Revolut customer records.
- The exposed data included birth dates, contact details, and copies of identity documents.
- Some customers may also have had selfies, account statements, and transaction histories exposed.
- ZachXBT said the incident may have targeted high-net-worth users.
- Revolut blocked the sender, alerted authorities, and said its systems and funds were not affected.
Read More: https://www.helpnetsecurity.com/2026/09/14/revolut-data-breach-privacy/