Revolut

Incident Overview

Revolut, within its operating sector, has been subject to a cybersecurity incident initially observed on 2026-09-14. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

An unauthorized party used a legitimate government email domain to fraudulently request Revolut customer data

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include revolut.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

• Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.