REVOLUT CONFIRMS CUSTOMER DATA BREACH THROUGH FAKE GOVERNMENT REQUESTS

Summary from the TLDR InfoSec newsletter

Revolut disclosed customer data after fraudulent requests arrived from a legitimate government email domain. Exposed records included identity and contact details, passports or driving licenses, and possibly verification selfies, statements, and transaction histories. Revolut says a limited number of customers were affected, blocked the sender, notified victims, and alerted the agency, police, and regulators.