Revolut Confirms Customer Data Disclosure After Fraudulent Government Email Requests

Revolut customer data disclosure following fraudulent requests sent from a legitimate government agency email domain.

Revolut confirmed that sensitive customer information was disclosed after fraudulent requests were sent using a legitimate government agency email domain, according to Cointelegraph.

The financial technology company said the incident did not affect its systems or customer funds. The disclosure involved sensitive customer information, while Revolut maintained that its core systems and funds remained unaffected.

Fraudulent Requests Used Legitimate Government Email Domain

According to the report, the requests that led to the disclosure were fraudulent despite being sent from an email domain belonging to a legitimate government agency.

The use of an authentic government domain adds a specific security dimension to the incident. Rather than indicating that Revolut's systems were compromised, the disclosure resulted from fraudulent requests associated with a legitimate government email infrastructure.

Cointelegraph reported that Revolut confirmed the circumstances surrounding the disclosure but did not provide additional details in the X post about the government agency involved, the nature or volume of the customer information disclosed, or the individuals responsible for the fraudulent requests.

Revolut Says Systems and Funds Were Unaffected

Revolut said its systems were not affected by the incident and that customer funds remained unaffected.

That distinction separates the reported disclosure from a direct compromise of Revolut's systems or an attack that resulted in customer funds being accessed. The information provided by Cointelegraph does not indicate that customer balances were altered or that Revolut's underlying systems were breached.

The incident nevertheless involves the disclosure of sensitive customer information, making the circumstances surrounding the fraudulent requests central to the reported event.

Details of the Disclosure Remain Limited

The Cointelegraph post did not specify what categories of sensitive customer information were disclosed or how many customers were affected.

It also did not identify the government agency whose legitimate email domain was used in the fraudulent requests. Without those details, the full scope of the disclosure cannot be established from the information currently provided.

Revolut's confirmation that its systems and customer funds were unaffected provides the company's stated assessment of the incident, while questions remain about how the fraudulent requests were processed and what customer information was ultimately disclosed.

writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.