Revolut disclosed that a limited number of customers had sensitive information exposed through an email-based scam involving an unauthorized third party using a legitimate government email domain.
The fintech company said the breach occurred when attackers impersonated officials using a genuine government email address to trick customers into revealing personal data.
Revolut has not specified the exact number of affected customers or detailed which types of information were compromised. The company's statement confirms the scam targeted its user base but emphasized the exposure remained limited in scope.
This incident highlights ongoing vulnerabilities in email-based social engineering attacks, where fraudsters exploit legitimate domain names to gain customer trust. Revolut did not immediately announce additional security measures or compensation for affected users.
The company has notified impacted customers and encouraged them to monitor their accounts for suspicious activity. Revolut users can review their account security settings and enable additional authentication factors through the app.
The breach adds to a growing list of financial services companies experiencing customer data compromises through social engineering tactics rather than direct system vulnerabilities.
A Flock Safety worker called police on an InvestigateTV reporter documenting a public surveillance camera installation. The incident raises questions about transparency in camera deployment and worker protocols.
Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor malware.
US schools and police are issuing warnings about a viral social media trend using disturbing and AI-generated versions of Dr. Seuss's Cat in the Hat character to threaten students and communities. Several teenagers have been arrested or charged in connection with the posts.
Zoom's Linux client continuously monitors the X11 clipboard, capturing everything users copy regardless of whether they interact with Zoom. The privacy issue was discovered and shared on social platforms.