Security Brief/Brief

Revolut Discloses Data Breach Exposing Customer Financial Info and Passports

Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. The disclosure does not detail a protective step for affected customers.

BriefPublished 14 September 20261 min read1 linked source · 2 checked facts

stack of network switches with status LEDs in a rack — Illustration: Network switches arranged in a server rack with visible LED lights indicating connection status and power levels · Shixart1985 · CC BY 2.0 licence

Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency. The exposed data includes financial information and passports. The number of affected customers is undisclosed. The disclosure does not detail a protective step for those customers.

What the reporting says

Each line below is stated by the page named above it, and only by that page.

Stated by BleepingComputer

Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency.
The number of customers affected is undisclosed.

Our view

The incident is relevant to security-conscious operators, but the disclosure leaves the protective step unclear.

What the reporting says: Revolut disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency, and that the breach exposed financial info and passports.

Sources

BleepingComputerText stored 14 September 2026 · checked 14 September 2026

Found through monitored feeds: BleepingComputer. A feed address is how the desk finds a story, not the evidence for it — the sources listed above are the pages the facts were taken from.

More from Security Brief

Desk homepage →

Security Brief/Report

GitLab patches maximum-severity path traversal flaw, urges self-managed users to upgrade

GitLab released fixes for a maximum-severity path traversal vulnerability, CVE-2026-85706, and a second critical flaw, CVE-2026-87719. The company urged self-managed installations to upgrade immediately,…

Report · 12 September 2026 · 1 min read

Security Brief/Brief

MikroTik SSH authentication bypass exploited; patch released

MikroTik released a patch late last week for an SSH authentication bypass that is already being exploited. SANS ISC advises affected organizations to assume…

Brief · 13 September 2026 · 1 min read

Security Brief/Brief

Microsoft's September 2026 Patch Tuesday Fixes Record 973 Vulnerabilities

Microsoft released patches for a record-breaking 973 vulnerabilities in its September 2026 Patch Tuesday, including 113 rated critical and two exploited in the wild.

Brief · 12 September 2026 · 1 min read

How this story was checked

This story was written from the 1 page listed above, read by the collector on 14 September 2026 and stored.
Each line under What the reporting says was checked against that stored text on 14 September 2026. The check reads the stored text; no claim rests on a fresh look that did not happen.
Of 3 reported statements recorded for this story, 2 were confirmed against the page that carries them and are shown above; 1 could not be confirmed and were removed rather than published.
Some of the source text is the publisher's own feed summary rather than the full page, and the sending desk says so where it matters.
Figures in the text were required to appear in the stored source text before publication: yes. Identifiers: yes.
Where the reporting was silent, the text says so instead of filling the gap.