Hackers impersonating government agency hit Revolut customers in the UK

Summary

Revolut said hundreds of European customers had personal information disclosed to hackers who impersonated a government agency. The attackers allegedly used an email address from a legitimate government domain to submit fraudulent requests for customer data. The Financial Times reported that Italian hackers used a compromised Italian government email account to pose as officials. The information obtained reportedly included customer addresses, verification photographs, identity documents, and details concerning bitcoin activity. A source familiar with the incident estimated that approximately 680 customers in several European countries were affected. Revolut stated that its systems and customer funds were not affected, and said it had blocked the address, notified the relevant government agency and enforcement bodies, and contacted affected customers. Britain’s Information Commissioner’s Office confirmed that it had received a report and was assessing the information. The incident comes as Revolut continues rapid international expansion. The company, founded in 2015, was valued at $115 billion in a July secondary share sale. It recently received or pursued banking approvals in the United Kingdom, France, the United States, and Switzerland. Revolut says it has more than 80 million customers globally and aims to reach 100 million across 100 countries.