Revolut confirms customer data breach through fake government requests

{
  "signal_id": "8242f4c2-f40f-c8be-09f6-e815b9afeeff",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-09-12T14:40:00+00:00",
  "company": {
    "name": "Revolut",
    "domain": "revolut.com"
  },
  "data": {
    "url": "https://techcrunch.com/2026/09/12/revolut-confirms-customer-data-breach-through-fake-government-requests/",
    "title": "Revolut confirms customer data breach through fake government requests",
    "author": "Jagmeet Singh",
    "excerpt": "British fintech Revolut confirmed that it disclosed sensitive customer information to an unauthorized third party after receiving fraudulent requests sent from a legitimate government agency email domain. The exposed data included customers’ identity and contact details, including their birth date, postal and email addresses, and phone numbers, as well as copies of their identity documents including passports and driver’s licenses, according to a notification emailed to affected customers and reviewed by TechCrunch. The data may have also included verification selfies, account statements, and transaction histories, the firm said in its notification. A Revolut spokesperson confirmed to TechCrunch that a “limited” number of customers were impacted and said the company had contacted those customers directly. Revolut, however, did not disclose the exact number of impacted individuals. It also did not answer whether the incident was limited to a specific market and declined to disclose the government agency involved. “Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information,” the spokesperson said. Revolut told TechCrunch that it blocked the email address after discovering the scam from the unauthorized third party and alerted the...",
    "summary": "Revolut confirmed it suffered a data breach, exposing sensitive customer information to an unauthorized third party who used fraudulent requests from a legitimate government agency email domain.",
    "location": "London, United Kingdom",
    "planning": false,
    "image_url": "https://techcrunch.com/wp-content/uploads/2025/11/revolut.png?resize=1200,629",
    "confidence": 0.95,
    "published_at": "2026-09-12T14:40:00Z",
    "location_data": [
      {
        "city": "London",
        "state": "England",
        "region": "Northern Europe",
        "country": "United Kingdom",
        "continent": "Europe",
        "fuzzy_match": false
      }
    ],
    "vulnerability": "sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information",
    "article_sentence": "British fintech Revolut confirmed that it disclosed sensitive customer information to an unauthorized third party after receiving fraudulent requests sent from a legitimate government agency email domain."
  }
}

curl https://signals.autobound.ai/v1/signals/8242f4c2-f40f-c8be-09f6-e815b9afeeff \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"revolut.com","limit":20}'