Revolut Customers Hit by Second Data Breach in Just One Month
Revolut prospects, together with 1000’s in Ireland, confronted their second knowledge incident this month. This time, a third-party supplier, not Revolut’s personal programs, was accountable.
DriveWealth, the US dealer that beforehand dealt with US inventory buying and selling for Revolut customers, confirmed the breach occurred on September 4 and 5.
What Actually Happened at DriveWealth
A social engineering assault manipulates folks into revealing delicate info, moderately than exploiting a technical software program flaw immediately. DriveWealth confirmed that’s precisely how attackers gained unauthorized community entry this time.
The uncovered knowledge covers solely historic buyer data from earlier than Revolut modified its buying and selling mannequin. In the European Economic Area, together with Ireland, that cutoff fell in December 2023. Revolut stopped sharing particular person buyer particulars with DriveWealth after that change, so recent users remain unaffected.
Exposed info could embody names, e-mail addresses, telephone numbers, postal addresses, employment particulars, and biographical knowledge like citizenship, age, and gender. Partial DriveWealth account numbers had been additionally affected.
Passwords, cost card particulars, financial institution info, Revolut passcodes, and identification paperwork weren’t compromised. A Revolut spokesperson confirmed DriveWealth contacted affected customers immediately, with Revolut following up by way of its personal emails.
Why Does This Keep Happening to Revolut Customers?
This breach follows a separate incident earlier in September, when a classy impersonation rip-off utilizing a official Italian authorities e-mail area tricked Revolut into releasing delicate knowledge. That case affected roughly 680 prospects globally and concerned identification paperwork.
The breach additionally reached past Revolut. Stake and Hatch, two different platforms utilizing DriveWealth’s infrastructure, confirmed comparable publicity.
Neither Revolut nor DriveWealth has disclosed precise numbers of impacted prospects. Revolut serves roughly 3.4 million prospects in Ireland alone.
Affected customers ought to monitor communications, look ahead to phishing makes an attempt, and phone Revolut by way of official channels with considerations. Two breaches in one month spotlight rising danger tied to third-party fintech infrastructure.
The submit Revolut Customers Hit by Second Data Breach in Just One Month appeared first on BeInCrypto.
