As cited
Copy frozen at (site build).
breaches incidents
Revolut handed customer data to fraudsters using government email account
Revolut confirmed that fraudsters obtained customer data after submitting emergency data requests using a legitimate government email account. The fintech company honored the requests without adequate verification of the requester's identity or authority. This incident highlights a gap in Revolut's data protection procedures for handling law enforcement and government requests.
Why it matters: Revolut customers face identity theft and financial fraud risk when their data is disclosed to bad actors; practitioners handling law enforcement requests must implement robust verification methods to prevent social engineering attacks using spoofed or compromised government accounts.
- Source published
- First seen by Cybersecurity Tracker