Online bank Revolut handed customer data over to cyber criminals

Dutch Revolut customers were among those whose personal information was handed over to cybercriminals, according to an investigation by BNR. The broadcaster says it has seen payment account information, verification photos, and copies of customers’ identity documents. Revolut has not disclosed how many Dutch customers were affected or exactly what data was obtained. The online bank says customers’ funds and its own systems were not affected.

The recent fraud attempt affected a "limited number" of customers, the online bank has said. An unauthorized party used the email address of "a legitimate government agency" to submit fraudulent requests for customer information, according to a Revolut spokesperson.

Revolut said it had "immediately" blocked the email address used in the fraudulent requests. The online bank also contacted the affected customers "to inform them and provide support."

Revolut said it has also reported the incident to the relevant government agency, as well as privacy and financial regulators. The bank has not identified the government agency involved.

Some of the data has since been published online by the criminals, who claim it was obtained from Revolut, BNR reports. The broadcaster says the apparent victims are based in several countries. The leaked material includes copies of Dutch passports, including one belonging to singer Yade Lauren.