On September 12, Revolut confirmed that fraudulent requests appearing to come from a legitimate government-agency email domain caused it to disclose sensitive customer information. Reported exposed information included identity/contact data and potentially identity documents, verification selfies, statements, and transaction histories. Revolut said a limited number of customers were affected