Confirmed breach

Revolut data breach

GBUnited Kingdom

CryptoTicker.io reported a data breach at Revolut (United Kingdom) on 7 November 2026, and it has been confirmed. It affected 680 customers.

People affected: 680customers
Reported: 7 November 2026News report

Who is affected: Italy, United Kingdom, Lithuania

What was exposed 8

Passport numbers
Driver’s license numbers
Email addresses
Dates of birth
Names
Addresses
Identity verification selfies
Occupation data

How it happened

How: Phishing a sophisticated external identity attack was identified, in which an unauthorized third party had submitted fraudulent information requests via the email domain of a legitimate government authority source
Our translation from Dutch
een geraffineerde externe identiteitsaanval had vastgesteld, waarbij een onbevoegde derde via het e-maildomein van een legitieme overheidsinstantie frauduleuze informatieverzoeken had ingediend
Way in: Italian government authority email domain via the email domain of a legitimate government authority source
Our translation from Dutch
via het e-maildomein van een legitieme overheidsinstantie

Sources 1

News reportCryptoTicker.ioData breach at Revolut: am I affected, and what about my bitcoin history? (our translation from Dutch)7 November 2026 · 680 customers
Confirmed by Revolut: Revolut has confirmed that documents of approximately 680 customers in Europe were provided
Our translation from Dutch
Revolut heeft bevestigd dat documenten van zo'n 680 klanten in Europa zijn verstrekt

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If Revolut had your data

Look for Revolut’s own notice or letter: it should say what of yours was involved. Keep it.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Your email address is out: expect convincing phishing. Open Revolut by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your home address is out: be wary of letters, parcels or visitors that mention Revolut, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be Revolut, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Revolut? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Revolut breach

Was Revolut hacked?

CryptoTicker.io reported a data breach at Revolut (United Kingdom) on 7 November 2026, and it has been confirmed. It affected 680 customers. How it happened, by the sources: phishing, through Italian government authority email domain.

What data was exposed in the Revolut breach?

Passport numbers, Driver’s license numbers, Email addresses, Dates of birth, Names, Addresses, Identity verification selfies and Occupation data, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Revolut data breach settlement?

No settlement open for claims is on record for Revolut as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Revolut breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Revolut’s own site, or check the letter here.

More breaches in United Kingdom

Every breach in United Kingdom →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.