A total of 680 account holders have been affected globally.

It is understood that sensitive personal information belonging to 12 Revolut account holders in Ireland has been leaked in a data breach.

Last Saturday (12 September), Revolut said that it disclosed customer data to an unauthorised fraudulent party after receiving requests for information from an email with a government agency domain. The company mistakenly fulfilled the data requests before realising that the sender was phishing for data, it said in a community alert.

The leaked data includes full names, dates of birth, occupations, addresses, contact details, passports, drivers’ licences, financial statements and facial verification images.

“Revolut recently identified a sophisticated external impersonation scam where an unauthorised third party utilised a legitimate government agency domain email to submit fraudulent requests for information,” a Revolut spokesperson said.

“Upon detection, we immediately blocked the address and alerted the relevant government agency as well as enforcement agencies, data protection and financial regulators,” they added.

“Revolut systems and customer funds are unaffected. We have contacted the limited number of impacted individuals directly to inform them and provide support.”

A total of roughly 680 account holders are understood to have been affected globally. Revolut has more than 80m customers across the world, with roughly 3.4m based in Ireland.

“The Revolut incident is a reminder that organisations need to treat third parties as untrusted, regardless of how authoritative or legitimate a communication appears,” said Integrity360’s chief technology officer Richard Ford.

“Security awareness training also needs to focus on aspects of phishing that really matter, recognising how attackers use authority, urgency and context to make highly targeted requests feel credible.”

The data leak comes as the fintech continues on its aggressive expansion campaign to establish itself as a licensed banking institution in major markets globally, including the UK, US, France, Australia, Mexico and Peru.

Reports in April suggested that the company is on its way to a $200bn valuation in an eventual initial public offering expected around 2028. It was last valued at $75bn after a major share sale last November.

Revolut recently gained approval to provide crypto services in the United Arab Emirates, adding to its more than 16m crypto customers across Europe and the UK. The fintech also announced its own euro-backed stablecoin called EURR last month.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.

Updated, 9.05am, 16 September 2026: This article has been updated with comments from Integrity360 CTO Richard Ford.