dealsEurope

Revolut Faces Questions Over ‘Deeply Concerning’ Data Breach

A group of hackers is reportedly threatening to release stolen customer data

Founders Magazine Intelligence Desk15 Sept 2026 · 12:00 UTC3 min readSingle source · 1 src

What happened

Revolut, a prominent European fintech company, is facing scrutiny over a data breach where fraudsters reportedly gained access to sensitive customer information.

The exposed data includes passports, driving licences, birth dates, addresses, and other personal details belonging to approximately 114 customers.

A hacking group is allegedly threatening to publicly release this stolen data, with reports indicating they contacted Revolut's CEO, Nik Storonsky, claiming to possess more extensive information.

The numbers

The data breach reportedly exposed sensitive information belonging to approximately 114 Revolut customers.

Regulatory bodies have previously fined Revolut; for instance, the Data Protection Commission in Ireland imposed a €1.8 million penalty, followed by a more recent €8.0 million fine.

Who's behind it

The breach was reportedly executed by a group of fraudsters who managed to trick the fintech firm into divulging sensitive customer data.

The hackers allegedly contacted Revolut's CEO, Nik Storonsky, threatening to release the compromised information.

Comments on the incident were made by an executive consultant at New York University’s Stern School of Business in London, also named Nik Storonsky, who highlighted the industry-wide implications of such security failures.

Why it matters

This incident raises serious concerns about Revolut's security infrastructure, especially as the company expands its operations globally.

The breach could significantly impact customer confidence and lead to increased regulatory oversight, building on previous fines issued to the company.

Security experts emphasise that such events can severely damage a company's reputation and highlight the critical need for robust data protection in the financial sector.

What to watch

Revolut has confirmed it is investigating the breach and has taken steps to enhance its security measures and prevent further dissemination of the data.

The company is likely to face ongoing examination from regulatory bodies, including the Data Protection Commission in Ireland, which has previously imposed fines on Revolut.

The long-term consequences for Revolut's global expansion ambitions and its standing among its millions of customers across various markets remain a key area of observation.

AI-assisted reporting. This story was drafted with AI assistance from the sources listed above and reviewed against our editorial rules before publication. Facts carry source provenance. Figures, investors, founders and quotations are never generated — if a detail is not in a source, it is not published.

Keep reading

Related coverage