Revolut confirms customer data breach through fake government requests

Summary

Revolut confirmed a data breach where sensitive customer information was disclosed to an unauthorized party via fraudulent requests from a legitimate government email. The exposed data includes identity and contact details, and potentially identity documents and selfies. Revolut has contacted affected customers and alerted authorities.

Key Takeaways

1. Revolut confirmed that it disclosed sensitive customer information to an unauthorized third party after receiving fraudulent requests sent from a legitimate government agency email domain.
2. The exposed data included customers’ identity and contact details, including their birth date, postal and email addresses, and phone numbers, as well as copies of their identity documents including passports and driver’s licenses.
3. Revolut told TechCrunch that it blocked the email address after discovering the scam from the unauthorized third party and alerted the relevant government agency, law enforcement, and relevant regulators, adding, “Revolut systems and customer funds are unaffected.”

Statement Breakdown

• Claimed Facts: 60% of statements the article presents as facts
• Opinions: 20% of statements classified as editorial or subjective
• Claims: 20% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article relies on a company spokesperson and a security researcher for information. While TechCrunch is a reputable source, the lack of direct confirmation from the government agency and the limited details provided by Revolut reduce the overall credibility.

Bias assessment: Tech Industry Reporting. The article focuses on reporting a data breach within a fintech company, a common topic for tech news outlets. The tone is informative and objective, presenting facts and statements from involved parties without overt endorsement or criticism.

Note: This article reports on a confirmed data breach. While Revolut has confirmed the incident, details are limited, and further official statements from the involved government agency may provide additional context.

Credibility flag: Information Verified

Claimed Facts (6)

• This is a direct statement of fact confirmed by Revolut.
• This details the specific data compromised, as reported by Revolut to affected customers.
• This statement specifies additional data that might have been exposed, as stated by Revolut.
• This is a direct confirmation from a Revolut spokesperson regarding the scope and immediate actions.
• This details the immediate response and security measures taken by Revolut.
• This provides factual background information about Revolut's scale and operations.

Opinions (1)

• This is an interpretation by the researcher about the targeting of the breach, not a confirmed fact.

Claims (1)

• While presented as a fact by Revolut, the term 'sophisticated' and the description of the scam's execution are framed in a way that could be seen as an attempt to mitigate blame, making it lean towards a narrative rather than a purely objective fact.

Key Sources

• Revolut — Fintech Company
• Jagmeet Singh — Reporter
• TechCrunch — Technology News Outlet
• ZachXBT — Crypto Security Researcher