As cited
Copy frozen at (site build).
breaches incidents
Revolut’s paperwork breach shows why insurers are rethinking what counts as a ‘cyber attack’
Revolut disclosed a data incident in which an attacker posing as a government authority requested customer information via email, and the company fulfilled the request without proper verification. The incident highlights gaps in access controls and raises questions about how insurers classify incidents that result from social engineering rather than technical exploitation.
Why it matters: Practitioners and risk managers need to understand that pretexting attacks on administrative staff can expose customer data at scale, and many cyber insurance policies may not cover incidents lacking technical compromise, creating coverage gaps.
- Source published
- First seen by Cybersecurity Tracker