It was reported that the UK-based fintech company Revolut confirmed a customer data breach, where an unauthorized third party exploited legitimate government agency domain email addresses to submit fraudulent information requests, resulting in the exposure of sensitive customer information. The leaked data includes identity and contact details such as date of birth, postal and email addresses, phone numbers, as well as copies of identity documents like passports and driver’s licenses; verification selfies, account statements, and transaction histories may also have been compromised.

Revolut stated the number of affected customers is "limited," and has directly notified relevant customers, though it did not disclose the exact figure or specify whether the incident was confined to particular markets, nor would it reveal the involved government agency. The company said it has blocked the associated email addresses and informed government bodies, law enforcement, and financial regulators, emphasizing that its systems and customer funds remain unaffected. Revolut serves over 80 million customers globally and operates banking services in more than 30 countries. Cryptocurrency security researcher ZachXBT noted that the incident appears to target high-net-worth individuals.