Nearly 700 Revolut customers have had their private data stolen in a major breach, according to City AM. The fintech firm has contacted 680 individuals affected by what it described as a "sophisticated" impersonation scam.
Compromised data includes customers' identity documents, postal and email addresses, facial verification images, and phone numbers. The hacker group, calling itself Revolut Smilik, has confirmed it is seeking payment from Revolut and has threatened to release "more and more data everyday" if payment is not received.
Revolut stated that its core infrastructure, databases, and customer accounts were not compromised. The company said it was targeted when hackers used a legitimate government agency email to submit fraudulent information requests. Upon detection, Revolut blocked the address and alerted relevant agencies.
The Financial Conduct Authority and the Information Commissioner's Office have both confirmed they are engaging with or assessing the reported incident.