Revolut confirmed in September 2026 that staff had sent passport scans and Bitcoin transaction records to an email address impersonating a government authority. The admission landed as the neobank was pushing for a lean bank license in Israel. Trust collapsed in a single disclosure.
💡 Frequently Asked Questions (FAQ)
- Q: What is a data breach?
- A: A data breach is unauthorized access or disclosure of sensitive information, such as passport scans and transaction records, often due to human error or phishing.
- Q: What did Revolut admit in September 2026?
- A: Revolut confirmed staff mistakenly sent customer passport scans and Bitcoin transaction records to an email address impersonating a government authority.
- Q: Why did this breach hurt Revolut’s Israeli license?
- A: The leak destroyed trust and raised serious data protection and operational risk concerns just as Revolut was pushing for a lean bank license in Israel.
- Q: How can companies prevent phishing-based data leaks?
- A: By enforcing email verification, staff training, strict data transfer controls, and zero-trust authentication for sensitive documents.