DriveWealth breach exposed historical Revolut customer data

DriveWealth said an unauthorized party accessed its network on September 4 and 5, exposing historical personal information held for some Revolut customers and customers of other trading apps. The broker attributed the access to a social-engineering campaign by unknown third parties. Revolut said its own systems were not accessed and that customer funds and investments remained safe. The information potentially involved for Revolut customers includes names, email addresses, phone numbers, postal addresses, employment details, country of citizenship, age, gender and part of a DriveWealth account number, according to notices and statements from the companies. Revolut said passwords, passcodes, card details and identity documents were not exposed. The categories describe information that may have been affected; the companies have not established the full scope of the records involved. The affected Revolut population varies by market. Revolut said the incident relates to US customers who used its optional US stock-trading service. In the UK, European Economic Area and Australia, it concerns historical records from before changes to the company’s trading arrangements.