Revolut says some customer data was exposed in e-mail-based scam

REVOLUT said a “limited number” of customers had sensitive information disclosed in a scam involving an unauthorised third party that used a legitimate government e-mail domain.

The financial technology firm said it blocked the address after detecting the scheme and alerted the “relevant government agency,” law enforcement, data-protection officials and financial regulators. Tech site TechCrunch earlier reported the breach on Saturday (Sep 12).

“Revolut systems and customer funds are unaffected,” a Revolut spokesperson said on Saturday by e-mail. “We have contacted the limited number of impacted individuals directly to inform them and provide support.”

The London-based fintech has more than 80 million customers globally, with a goal of reaching 100 million. It has identified the US as a key growth market and received conditional approval in early September to operate as a national bank there, after applying for a US charter in March. 

Revolut, valued at US$115 billion in a July share sale, has committed US$500 million to the US over three to five years and has stepped up marketing efforts, including offering free subway rides to New Yorkers.

In February, Revolut started its first major banking operations outside Europe in Mexico. BLOOMBERG