Revolut Data Breach at DriveWealth Follows Impersonation Incident

A data incident at US broker DriveWealth has affected Revolut customers, BeInCrypto reported. The broker has supported Revolut’s US stock trading service.

It is the second case involving Revolut customer data in September.

Neither company has disclosed how many Revolut customers are involved.

In a statement on its website, DriveWealth said unauthorised access to its network took place on 4 and 5 September.

BeInCrypto reported that DriveWealth attributed the access to social engineering. Instead of breaking into software, this approach works by misleading people into handing over access or information.

A Revolut spokesperson told The Irish Times that in the UK, the European Economic Area (EEA) and Australia, the incident involves older records from before Revolut changed how it runs US stock trading.

In the EEA, including Ireland, this change took place in December 2023.

The spokesperson said individual customer details in these markets have not been shared with DriveWealth since then, so more recent users there are not affected.

According to BeInCrypto, the records may contain names and contact details, such as email addresses, phone numbers and postal addresses.

They may also include employment information, citizenship, age, gender and partial DriveWealth account numbers.

Earlier in September, a separate incident saw Revolut release sensitive data in response to requests from impersonators using a legitimate government email domain.

Featured image: Edited by Fintech News Switzerland, based on image by Revolut via its website.

The post Revolut Data Breach at DriveWealth Follows Impersonation Incident appeared first on Fintech Schweiz Digital Finance News - FintechNewsCH.