Revolut Customers Experience Second Data Breach in September

Revolut has reported that its customers' data was compromised for the second time this month, following a breach at DriveWealth, a third-party US broker that previously managed Revolut's US stock trading. The incidents occurred on September 4 and 5, 2023, and were attributed to a social engineering attack.

The exposed data includes historical customer records such as names, email addresses, ages, genders, citizenship information, postal addresses, and employment details. However, it is important to note that the breach does not affect any data from customers in the European Economic Area after December 2023, as Revolut ceased sharing individual customer details with DriveWealth after changing its trading model.

Revolut emphasized that its core infrastructure, customer funds, and accounts were not compromised during this incident. Following the breach, DriveWealth has reached out to affected customers directly, and Revolut has also communicated with its users regarding the situation.

This latest breach follows an earlier incident in September where hackers used a legitimate Italian government email to deceive Revolut into disclosing sensitive information, impacting around 680 customers globally. Both Revolut and DriveWealth have not disclosed the exact number of customers affected by the recent breach.

As Revolut serves approximately 3.4 million customers in Ireland alone, users are advised to remain vigilant for phishing attempts and to monitor communications from the company.