Revolut customers in the UK and across Europe have fallen victim to a sophisticated impersonation scam, where hackers posed as a government agency to obtain sensitive personal information. The attackers, believed to be Italian, used a compromised email from a legitimate government domain to request data from Revolut, leading to the exposure of customer addresses, identity documents, and cryptocurrency activity.
This incident raises significant concerns about the security of personal data in the digital banking sector. Although Revolut has assured that its systems and customer funds remain secure, the breach highlights vulnerabilities in how financial institutions verify requests for sensitive information. As digital banking expands, the potential for similar attacks could increase, affecting customer trust and financial security.
The timing of this breach is particularly troubling as Revolut is in the midst of expanding its global operations, having recently secured banking licenses in the UK, France, and the US. Such growth could attract more cybercriminals looking to exploit weaknesses in the systems of rapidly growing fintech companies.
As the Information Commissioner’s Office investigates, customers are urged to remain vigilant about their personal information. This incident serves as a reminder of the importance of robust cybersecurity measures and the need for consumers to be cautious about sharing sensitive data, especially when approached by seemingly official entities.
Source: Euronews
