The hack exposed account details of 50,000 users while Revolut claims to have over 20,000,000 users, this would mean 0.16% were affected. The 50,000 victims of the hack will be susceptible to phishing and smishing attacks in attempts to gain more access to the user's other accounts, this could include social media and other bank accounts.
The data breached from Revolut customers include: The Lithuanian data protection agency notes that the likely exposed information includes:
- Email addresses
- Full names
- Postal addresses
- Phone numbers
- Limited payment card data
- Account data
We recently received a highly targeted cyber attack from an unauthorized third party that may have gained access to some of your information for a short period of time. You do not need to take any action, however we wanted to let you know, and sincerely apologize for this incident.
We immediately detected and isolated the cyberattack.
As you were part of a very small percentage of affected customers, we want to reassure you that your data is now safe, and we understand that you may have questions about this incident.
We emphasize that no access was made to the theft of funds. Your money is safe, as always. You can use your card and account normally.
As a precaution, we have created a dedicated team to monitor your account and keep your money and account safe.
Although your money is safe, you may be at increased risk of fraud. We recommend that you be especially vigilant for any suspicious activity, including suspicious emails, phone calls or messages.
We will be in touch shortly with further information if needed.
Although our support team representatives are available to assist you, we may not yet be able to answer all of your questions as investigations are still ongoing.
This was an isolated incident and the security of our customers' accounts remains our top priority. Although cyber-attacks are a regular threat to many businesses, we took immediate action to properly manage this incident and protect our customers.
Thank you,
The Revolut team
More information by from the Data Protection Inspectorate in Lithuania, where Revolut holds a banking license can be found here
More sources