Revolut Customers Hit by Second Data Breach in a Month Following DriveWealth Hack

US broker DriveWealth confirmed unauthorized network access via a social engineering attack on September 4 and 5, exposing historical customer data from fintech partners. The breach compromised names, emails, postal addresses, employment details, and partial DriveWealth account numbers, though passwords and payment cards were unaffected. Revolut's recent users are excluded because the platform stopped sharing individual biographical details with DriveWealth in December 2023 for the European Economic Area. The vulnerability in DriveWealth's centralized infrastructure also exposed customer records from trading platforms Stake and Hatch. It marks Revolut's second data incident in a month, following an earlier impersonation scam using a legitimate Italian government email domain that tricked the company into releasing identity documents for roughly 680 customers.