Sept 12 (Reuters) – British fintech Revolut confirmed on Saturday that sensitive customer information was disclosed to an unauthorized third party after it received fraudulent requests from a legitimate government agency email domain.
Here are a few details:
• Revolut said in a statement that the breach affected a “very limited” number of customers, who had been notified by the company. It did not give further details.
• “Revolut systems and customer funds are unaffected,” a spokesperson for the company said, without disclosing the exact number of individuals affected by the breach.
• “Upon detection, we immediately blocked the address and alerted the relevant government agency as well as enforcement agencies, data protection, and financial regulators,” the spokesperson said.
• The compromised data included customers’ birth date, postal and email addresses, and phone numbers, as well as copies of their identity documents including passports and driver’s licenses, according to a TechCrunch report.
• Revolut is planning for a potential public listing and aiming for a valuation of up to $200 billion.
• It is one of the most successful European fintech companies, with no physical bank branches.
(Reporting by Sumedha Mukherjee in Bengaluru; editing by Philippa Fletcher)
