[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foN09ov1RFMB2IfmXLF_fNTZHrMs3bGRl1vTV5Yg9eE0":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":125},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"c7a5d6bf-86e6-479c-892c-751c5f1d6f5f","Personal, Financial Info Exposed in Revolut Data Breach","personal-financial-info-exposed-in-revolut-data-breach-710682","The company unintentionally disclosed users’ information to a third party impersonating a government agency. The post Personal, Financial Info Exposed in Revolut Data Breach appeared first on SecurityWeek.","Fintech company Revolut has reported a data breach where a third party, impersonating a government agency, gained access to user data. The exposed information includes PII such as names, addresses, and identification documents, as well as financial details like IBANs and transaction histories. Revolut claims systems and customer funds remain unaffected and has notified affected users and relevant authorities.","Revolut data breach exposes personal and financial info via impersonation scam.","https:\u002F\u002Fwww.securityweek.com\u002Fpersonal-financial-info-exposed-in-revolut-data-breach\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FRevolut.jpeg","2026-09-14T13:03:35+00:00","2026-09-14T14:00:09.755568+00:00",7,[17],{"name":18,"type":19},"Revolut","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":20,"icon":22,"name":23,"slug":24},null,"Breaches","breaches",[26,28,33],{"category":27},{"id":20,"icon":22,"name":23,"slug":24},{"category":29},{"id":30,"icon":22,"name":31,"slug":32},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":34},{"id":35,"icon":22,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":41,"vendors":124},[42,71,98],{"slug":43,"name":44,"problem":45,"products":46},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":72,"name":73,"problem":74,"products":75},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",[76,82,90],{"vendor_slug":77,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":77,"url":80,"description":81},"dmarcian","\u002Fvendor-logos\u002Fdmarcian.png","dmarcian-platform","https:\u002F\u002Fdmarcian.com\u002F","DMARC report processing and guidance for moving domains to enforcement.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"valimail","Valimail","\u002Fvendor-logos\u002Fvalimail.png","valimail-enforce","Valimail Enforce","https:\u002F\u002Fwww.valimail.com\u002Fproducts\u002Fenforce\u002F","Automated DMARC enforcement with discovery of every service that sends mail as your domain.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","email-fraud-defense","Proofpoint Email Fraud Defense","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-fraud-defense","DMARC deployment and monitoring with hosted SPF and DKIM services.",{"slug":99,"name":100,"problem":101,"products":102},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":120,"product_name":121,"url":122,"description":123},"enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",[],{"slug":126,"title":127,"body":128,"framework_refs":129,"framework_notes":142},"revolut-breach-social-engineering-exposes-millions-of-user-records","Revolut Breach: Social Engineering Exposes Millions of User Records","A threat actor successfully impersonated a government agency to trick Revolut into granting access to sensitive user data, including PII and financial records such as IBANs and transaction histories. This is a classic social engineering attack, where the weakness exploited was not a technical vulnerability but a failure in identity verification and authorization procedures. Fintech companies handling sensitive financial data are high-value targets, making robust identity verification of external requestors absolutely critical. The breach underscores that even technically secure systems can be compromised when human and procedural controls are insufficient.",[130,131,132,133,134,135,136,137,138,139,140,141],"CIS Control 3: Data Protection","CIS Control 6: Access Control Management","CIS Control 14: Security Awareness and Skills Training","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 IA-12: Identity Proofing","NIST SP 800-53 AT-2: Literacy Training and Awareness","NIST SP 800-53 AU-6: Audit Record Review, Analysis, and Reporting","GDPR Article 5: Principles Relating to Processing of Personal Data","GDPR Article 32: Security of Processing","GDPR Article 33: Notification of a Personal Data Breach to the Supervisory Authority","PCI DSS Requirement 7: Restrict Access to System Components and Cardholder Data","ITIL Service Management: Information Security Management",{}]