Revolut confirms attackers extracted customer data by impersonating government agencies
TechCrunch·medium signal
Revolut confirmed on 12 September that customer data was disclosed in response to fake government and law-enforcement requests, and said it notified affected customers plus the relevant government agency, law enforcement and financial regulators. Emergency-disclosure request channels are a trust-by-letterhead process, and they are exactly the kind of workflow a language model makes cheap to forge at volume.