Revolut Users Hit by Second Data Breach in Days via DriveWealth
Revolut customers have been caught up in a security incident at US broker DriveWealth — the second breach to hit Revolut users within just a few days.
What happened
Revolut customers who use the platform's investment features have been affected by a data security incident at DriveWealth, a US brokerage firm that powers Revolut's investment services, according to Finextra. This is the second separate incident to impact Revolut users within a matter of days. Personal and financial data held by users through the DriveWealth integration may have been exposed, though the full scope of the breach is still being assessed.
Why it matters
This back-to-back pattern of breaches is a reminder that when you use a consumer app for investing, your data passes through a chain of third-party providers — and any link in that chain can become a vulnerability. European financial supervisors (EBA, EIOPA, and ESMA) flagged this exact issue in a recent joint warning, identifying external technology dependencies as one of the most pressing risks to the EU financial system right now. The two events, while unconnected, land at the same moment and reinforce each other.
Impact on personal finance
If you hold investments through Revolut — including stocks or ETFs — your personal and financial data could have been exposed in this incident. This matters beyond just privacy: exposed data can be used in phishing attacks, identity fraud, or account takeover attempts. Check your Revolut account for any unusual activity or unrecognised transactions, and be extra cautious about emails or messages claiming to be from Revolut or DriveWealth in the coming weeks. It is also worth reviewing which permissions and integrations are active in your investment app, and considering whether to enable additional account security features like stronger two-factor authentication.
Regional perspective
Global / EU: The EU supervisory bodies' warning about external provider dependencies applies directly here — Revolut is EU-regulated but relies on a US-based broker for investment execution, illustrating the cross-border nature of modern fintech risk. US: DriveWealth operates under US jurisdiction, meaning any regulatory response to the breach will likely involve American authorities alongside European ones.
Run these numbers on your own money
Treziqo shows you where your money actually goes, when a cash-flow gap is coming, and what to do about it. Budgets, debts, investments and receipts in one place.
Not yet? Get Treziqo updates instead:
No spam. Just launch info and beta access notifications. Unsubscribe anytime.
Finfluencers, Fraud, and Revolut's New EU Banking Licence: Weekly Finance Wrap
More than half of Brits lost money following social media finance tips, Revolut just became a full EU bank, and the SEC charged a fund adviser with fraud. Here's what it all means for your wallet.
SEC Targets Retail Fraud While Starling Bank Fights Phone Theft
The SEC has launched a dedicated task force to protect everyday investors from fraud, and Starling Bank now locks your app when your phone is snatched. Here's what both mean for you.
UK Payments Giants Under Scrutiny as Household Debt Stress Mounts
The UK's FCA has launched a competition investigation into PayPal, Mastercard, and Visa — just as court data reveals a sharp rise in unpaid debt cases among British households.
This article is for informational purposes only and does not constitute investment or financial advice. It was created with AI assistance under human editorial review, drawing on publicly available sources listed below.
Sources
-
1
Revolut customers impacted by new data breachFinextra — Latest Headlines ·
-
2
Sněmovna podpořila novelu, která zavede věkové valorizace a navyšování důchodů pracujícím penzistůmMěšec.cz — Osobní finance ·
-
3
ECB Executive Board member Isabel Schnabel to resign to take senior role at IMFECB Press Releases ·
- 4
-
5
FedNow to enable cross-border paymentsFinextra — Latest Headlines ·
- 6