Back

Revolut data breach and DriveWealth security incident

Revolut customers have faced their second data security incident in a single month. However, this latest breach did not occur on Revolut's own systems.

Instead, US broker DriveWealth—which before handled US stock trading for international users—confirmed that an unauthorized party accessed its network via a social engineering attack.

While digital banking platforms work hard to secure user assets, vulnerabilities at third-party infrastructure providers frequently spark widespread business news.

Fintech third-party vendor cyberattacks and data exposure

The breach at DriveWealth affected historical records rather than active accounts. For European users, the exposure is limited to data collected before Revolut updated its trading infrastructure model.

Снимок экрана 2026-09-25 152312.png

Exposed information includes names, email addresses, phone numbers, employment details, and partial account numbers, though critical assets like passwords and payment card details remained completely safe.

As interconnected financial networks face rising threats, many remote cybersecurity professionals manage risk assessments and threat monitoring from a local coworking space.

Historic customer profile and US stock trading data leak

Because modern financial apps rely heavily on external partners for specialized services, third-party security lapses can create widespread operational ripples.

Industry analysts, compliance officers, and software engineers frequently test these risks at upcoming technology conferences and professional briefings.