British financial technology giant Revolut has officially acknowledged a security incident that led to the exposure of sensitive customer data. The breach occurred after the company was targeted by fraudulent requests originating from what appeared to be a legitimate government email domain. In a statement to the media, a company spokesperson confirmed that an unauthorized third party managed to gain access to specific account details by mimicking official communications.

The company moved quickly to mitigate the situation, blocking the malicious email address and notifying the relevant government bodies, law enforcement, and financial regulators. While Revolut clarified that its core banking systems and customer funds remain completely secure, the breach did impact personal information, including names, contact details, birth dates, and copies of identity documents like passports and driver’s licenses. Although the exact number of affected users remains undisclosed, the incident comes at a critical time for the fintech leader as it prepares for a potential public listing and continues its push toward a massive market valuation.