Revolut reveals customer data breached twice this month

HACK OR EXPLOITRevolut reveals customer databreached twice this month49IMPORTANCECLOSED3NEWS MEDIA3PIECESSep 24, 2026 17:02blockboard.net

Revolut disclosed that customer information was exposed in two incidents on September 4 and September 5 involving its former third-party US broker DriveWealth. The affected data included personal details such as names and contact information, and in some cases broader profile or investment-related information. Some Revolut customers in Ireland were among those affected, and the incident was also reported as touching customers of other platforms connected to DriveWealth.

What this rests on

Claim by claim, with its source
✓
Revolut said customer data was exposed in two incidents on September 4 and September 5 involving its former third-party US broker DriveWealth.
✓
The exposed information included names, emails, ages, genders, citizenship information, postal addresses, and employment details.
✓
An unauthorised party accessed personal information and, in some cases, investment-related information on September 4 and 5.
✓
Some customers of Revolut, Stake, and Hatch were affected, and the categories of exposed information differed across the three platforms.
✓
Information tied to older customer profiles may have been exposed, including names, contact details, addresses, and employment data.
✓
Revolut customers, including thousands in Ireland, faced a second data incident this month, and DriveWealth confirmed the breach dates as September 4 and 5.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Revolut customers are the people most directly affected, along with some customers of Stake and Hatch who were also linked to the same incident. For them, the change today is that personal details and, in some cases, investment-related information were exposed rather than remaining internal to the brokerage setup.

Before these incidents, DriveWealth handled US stock trading for Revolut users; after the disclosure, customer data tied to that setup is described as having been exposed on September 4 and 5. What stays the same is that the platforms are still tied to the same third-party infrastructure relationship, even though the incident involved different categories of information across the affected services.

Market reaction

BT Bitcoin market event: it is read against the reference from 2 h before to 4 h after the line marks the first headline
published
+0.00 % before publication
-0.20 % after
$84,388price at publication
9series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 24 16:57
Protos scoop
Breaks the event: $3M
+3 min
Sep 24 17:00
Finance Magnates context
Its angle: infrastructure, notifications, disclosures; with quotes
+5 h 23 m
Sep 24 22:20
BeInCrypto echo
No new facts: unauthorized, responsible, manipulates

Other recent incidents

WhenWhat happenedFigure
2 days ago KolanHook (1.279453 ETH) incident no figure in dollars
3 days ago UNCX Network V2 · Incorrect Share Accounting incident $86k
3 days ago Pirate Chain · Transaction validation vulnerability incident $10.7M
4 days ago Gamdom · Hot wallet server compromise incident $4.2M
7 days ago Papertrade · Price manipulation incident $1.3M

4200 incidents stored