US broker DriveWealth breached via social engineering; data of Revolut, Stake and other platform customers exposed

According to TNW, DriveWealth, the US broker behind US stock trading in Revolut and other apps, said an unauthorized party entered its network on September 4 and 5 through social engineering, and platforms such as Stake and Hatch have notified customers ^[1]. According to The Register, potentially exposed data includes names, emails, phone numbers, postal addresses, employment details, citizenship, age, gender and partial account numbers, while passwords and payment data were not affected and Revolut says its systems were not compromised ^[2]. Stake advises customers to be extra alert to emails, texts or calls claiming to be from DriveWealth or Stake that ask them to confirm details, log in or provide a one-time code, and to set a unique password and enable app-based two-factor authentication ^[3].

Industries mainly affected: Finance

1. Be alert to messages or calls claiming to be from DriveWealth or partner platforms asking you to log in or give one-time codes ^[3].
2. Change to a unique password and enable two-factor authentication, preferably with an authenticator app .