Revolut Users Affected by Second Data Breach Linked to Third-Party Provider

Revolut has reported that some of its customers were impacted by another data security incident, making it the second time in a month that the company’s users have faced a breach. According to company statements and reports, the issue did not stem from Revolut’s internal infrastructure, but rather from a third-party provider called DriveWealth, a brokerage firm that previously facilitated US stock trading services for Revolut users.

DriveWealth confirmed the breach occurred on September 4 and 5. The company disclosed that the incident was the result of a social engineering attack, though specific details about the nature of the attack and the extent of data exposed remain limited at this time. The affected customer group reportedly includes thousands of users in Ireland among other regions.

Revolut and DriveWealth stated that they are investigating the incident and communicating directly with impacted customers. This situation highlights the broader risks financial technology platforms face, not only from direct attacks but also from vulnerabilities in their third-party service providers. Ongoing investigations will help clarify the scope and impact of the breach.

Users are advised to watch for official updates and remain vigilant regarding potential suspicious communications or activity related to their accounts.