Revolut confirms cyberattack exposed personal data of tens of thousands of users
Revolut confirms cyberattack exposed personal data of tens of thousands of users Fintech startup Revolut has confirmed it was hit by a highly targeted cyberattack that allowed hackers to access the personal details of tens of thousands of customers.
Revolut representative Michael Bodansky let TechCrunch know that an “unapproved outsider got admittance to the subtleties of a little rate (0.16%) of our clients for a brief timeframe.” Revolut found the vindictive access late on September 10 and disengaged the assault by the next morning.
“We immediately identified and isolated the attack to effectively limit its impact and have contacted those customers affected,” Bodansky said. “Customers who have not received an email have not been impacted.”
Revolut, which has a financial permit in Lithuania, wouldn’t agree precisely the number of clients that were impacted. Its site says the organization has around 20 million clients; 0.16% would mean around 32,000 clients. Nonetheless, as per Revolut’s break revelation to the experts in Lithuania, first spotted by Bleeping PC, the organization says 50,150 clients were affected by the break, remembering 20,687 clients for the European Financial Region and 379 Lithuanian residents.
Revolut also declined to say what types of data were accessed but told TechCrunch that no funds were accessed or stolen in the incident. In a message sent to affected customers posted to Reddit, the company said that “no card details, PINs or passwords were accessed.” However, the breach disclosure states that hackers likely accessed partial card payment data, along with customers’ names, addresses, email addresses and phone numbers.
The exposure expresses that the danger entertainer utilized social designing strategies to get to the Revolut data set, which regularly includes convincing a worker to surrender delicate data like their secret key. This has turned into a famous strategy in ongoing assaults against various notable organizations, including Twilio, Mailchimp and Okta.
But Revolut warned that the breach appears to have triggered a phishing campaign, and urged customers to be careful when receiving any communication regarding the breach. The startup advised customers that it will not call or send SMS messages asking for login data or access codes.
As a precaution, Revolut has also formed a dedicated team tasked with monitoring customer accounts to make sure that both money and data are safe.
Revolut confirms cyberattack exposed personal data of tens of thousands of users “We view episodes like these extraordinarily in a serious way, and we might want to truly apologize to any clients who have been impacted by this occurrence as the security of our clients and their information is our main concern at Revolut,” Bodansky added.
Revolut confirms cyberattack exposed personal data of tens of thousands of users Last year Revolut raised $800 million in fresh capital, valuing the startup at more than $33 billion.