According to manager magazin, Revolut answered a fraudulent information request sent from a legitimate government agency email domain, handing ID copies, account numbers and home addresses of at least 700 customers to criminals, who are now demanding ransom [1]. The UK ICO is investigating, and according to fuitededonnées.fr Revolut says it will cover ID replacement costs for 680 affected customers, 55 of them in France [1][2]. fuitededonnées.fr advises affected people to get written confirmation from Revolut of cost coverage before replacing documents and never to share data or ID after unsolicited emails or calls [2].
Revolut handed ID documents and account data of about 680 customers to fraudsters posing as a government agency
1 min read
- Disclosed
- Sep 16, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 680 people[2]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Confirm costs in writing; beware impersonation verify[2]
Confirm cost coverage in writing and never share ID with unsolicited contacts.
References
Media2
- [1]manager magazin2026-09-16Accessed 2026-11-11Snapshot 2026-11-11 sha256 58b47c5a7ad9
“Die britische Digitalbank Revolut hat die Daten von mindestens 700 Kunden an Cyberkriminelle weitergegeben, darunter Ausweiskopien, Kontonummern und Privatadressen.”
- [2]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.