Revolut confirmed a data breach caused by fraudulent government data requests, exposing customer information to attackers who posed as law enforcement. The company has notified affected customers and reported the incident to government agencies, law enforcement, and financial regulators.
The method of attack matters here: fake legal process requests, not a technical exploit. This is a social engineering vector that targets the compliance infrastructure banks are legally required to maintain. The full article details how the breach unfolded and which specific regulatory bodies were contacted.
Revolut operates in over 35 countries with more than 45 million customers. The scale of potential exposure and the precedent this sets for fintech firms receiving government data requests makes this worth reading in full, particularly for anyone tracking fraud tactics aimed at regulated financial institutions.
[READ ORIGINAL →]