Revolut has confirmed that sensitive customer information was disclosed after an unauthorised third party used a legitimate government agency email domain to submit fraudulent requests for data.
The London-based fintech said a limited number of customers were affected. A notification sent to those customers said the information potentially disclosed included passports and driving licences, verification selfies, dates of birth, postal and email addresses, phone numbers, account statements and transaction histories.
