During an interview with BFM TV, Cossa-Dumurgier said, per the report: “If they ever have to change their ID documents, we’re taking care of the associated costs.”
Cossa-Dumurgier said Revolut had provided assistance for the 680 clients affected by the data breach, according to the report.
We’d love to be your preferred source for news.
Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!
Revolut told Bloomberg Sept. 12 that sensitive information from a “limited number” of its customers was exposed in an email-based scam in which an unauthorized third party used a legitimate government email domain.
Revolut said it blocked the address after uncovering the scheme and notified the “relevant government agency,” as well as financial regulators, law enforcement and data-protection officials.
“Revolut systems and customer funds are unaffected,” the company told Bloomberg at the time. “We have contacted the limited number of impacted individuals directly to inform them and provide support.”
TechCrunch reported Sept. 12 that according to the notification email Revolut sent to affected customers, the exposed data included customers’ identity and contact details, such as birth date, postal/email addresses and phone numbers. The scammers also accessed identity documents like passports and driver’s licenses, and may have also seen verification selfies, account statements and transaction histories.
The Wall Street Journal reported Sept. 16 that Revolut was dealing with extortion threats from a hacker claiming to have perpetrated the breach. The hacker released bits of stolen customer data and threatened to reveal more unless Revolut pays a ransom, the report said.
Revolut told the WSJ at the time that it had alerted law enforcement, but declined to comment further on the extortion threat, per the report.
A Revolut spokesperson told PYMNTS Sept. 16: “Revolut recently identified a sophisticated external impersonation scam where an unauthorized third party utilized a legitimate government agency domain email to submit fraudulent requests for information. Upon detection, we immediately blocked the address and alerted the relevant government agency as well as enforcement agencies, data protection and financial regulators. Revolut systems and customer funds are unaffected. We have contacted the limited number of impacted individuals directly to inform them and provide support.”