British company faces problem ahead of its arrival in Israel

British fintech company Revolut has confirmed a leak of confidential customer data following a social engineering attack. The attackers sent fake requests from a genuine government domain. The incident occurred on the eve of the company's entry into the Israeli market.

British fintech company Revolut has confirmed a leak of confidential customer data following a sophisticated social engineering attack. The attackers managed to deceive the security service by sending requests from a genuine government agency email domain. According to company representatives, direct computer systems and customer bank accounts were not affected—no breach of digital infrastructure was recorded. The security gap arose due to a vulnerability in the procedure for handling official requests from government bodies. After detecting the deception, the company immediately blocked the compromised address, notified law enforcement, regulators, and all affected users. The attackers obtained personal customer data, including dates of birth, phone numbers, email addresses, as well as digital copies of passports and driver's licenses. Revolut's management has not disclosed the exact number of affected individuals. The incident occurred at a critical moment—right before the company's official expansion into the Israeli market, where the fintech plans to obtain a first-tier bank status to compete with traditional lenders.