Revolut Says Some Customer Data Were Exposed in Email-Based Scam

Revolut Ltd. said a “limited number” of customers had sensitive information disclosed in a scam involving an unauthorized third party that used a legitimate government email domain.

The financial technology firm said it blocked the address after detecting the scheme and alerted the “relevant government agency,” law enforcement, data-protection officials and financial regulators. TechCrunch earlier reported the breach Saturday.

“Revolut systems and customer funds are unaffected,” a Revolut spokesperson said Saturday by email. “We have contacted the limited number of impacted individuals directly to inform them and provide support.”

The London-based fintech has more than 80 million customers globally, with a goal of reaching 100 million. It has identified the US as a key growth market and received conditional approval in early September to operate as a national bank there, after applying for a US charter in March.

Revolut, valued at $115 billion in a July share sale, has committed $500 million to the US over three to five years and has stepped up marketing efforts, including offering free subway rides to New Yorkers.

In February, Revolut started its first major banking operations outside Europe in Mexico.

Read More: Revolut Wins Conditional Approval From OCC for US Bank Charter