Revolut discloses data breach exposing financial info, passports
September 14, 2026 · BleepingComputer · Severity: CRITICAL
Revolut disclosed a data breach after attackers gained access to internal systems via a compromised employee account, exposing customer financial details and passport identification data. The incident underscores the persistent risk of credential-based attacks against financial technology companies and the cascading impact of stolen identity documents on affected users. 📌 **Analyst Note:** Fintech companies remain high-value targets for credential theft due to the financial data they hold. The exposure of passport data alongside financial information creates a particularly dangerous combination for identity theft, as attackers can use passport details to bypass KYC verification at oth
Key Takeaways
- Revolut has disclosed a data breach that exposed sensitive financial information and passport data of an undisclosed number of users, with attackers gaining access through a compromised employee account.
- The breach is particularly concerning for affected customers as exposed passport data combined with financial information creates significant identity theft and fraud risks that require immediate protective action.
- Revolut users should immediately enable additional account security measures, monitor for suspicious activity, and be alert for targeted phishing attempts leveraging the exposed personal and financial information.