Revolut Hit by Second Data Breach Tied to Third-Party Partner

Revolut has confirmed that some of its customers were affected by a data breach for the second time in a short period. This latest incident did not originate within Revolut's own systems but at DriveWealth, a US-based broker that Revolut partners with to offer certain investment features. Because customer data was shared with DriveWealth as part of that partnership, the breach at the third-party firm was enough to expose information belonging to Revolut users.

Details of exactly what data was affected and how many customers were impacted have not been fully disclosed, but the pattern itself is worth noting. A company can maintain strong internal security while still being exposed through the vendors, brokers, or payment processors it relies on to deliver parts of its service. Multi-currency banking apps and fintechs often lean on a network of partners to offer everything from card issuing to investment access, and each of those links is a potential point of failure.

For someone comparing digital banking or multi-currency account providers, this is a useful reminder that a provider's own app security is only part of the picture. It is also worth considering how transparent a company is when incidents occur, how quickly it notifies affected customers, and whether it has faced repeated issues rather than a single isolated event. A provider that discloses breaches promptly and explains what data was involved is generally easier to trust than one that stays vague or slow to respond, even if neither outcome is ideal.

Repeated incidents at the same provider, even when the root cause differs each time, can also be a signal to pay closer attention to a company's security history before consolidating significant funds or personal data with it. This does not necessarily mean avoiding a provider altogether, since third-party breaches are a risk across the fintech industry and not unique to any single company. But it does support doing some basic due diligence: checking a provider's public breach history, reading how they communicate about incidents, and understanding which third parties they share your data with for services like investing, currency exchange, or card issuing.

Security incidents like this one are one of several factors worth weighing when choosing where to hold multi-currency balances or link a debit card for spending abroad. Fees, exchange rates, and card usage terms matter day to day, but a provider's track record on data protection matters just as much when something goes wrong. Readers comparing options can see how different providers stack up on fees and features on FairAscent's multi-currency banking comparison page, alongside general considerations for evaluating a provider's reliability.

This article was drafted with AI assistance as part of our editorial process.

Komentarze

Prześlij komentarz

Popularne posty z tego bloga

Visa and Mastercard begin processing transactions in Syria after sanctions status change

Visa and Mastercard have completed their first international card transactions in Syria, following a decision by the US government to remove the country from its list of state sponsors of terrorism. For years, Syria was largely cut off from mainstream global payment networks because of sanctions tied to that designation, which restricted banks and payment processors from doing business there. With the designation lifted, card networks and financial institutions have more legal room to re-establish or expand services in the country. This does not mean instant, full access for every business or consumer in Syria. Banks still need to rebuild correspondent banking relationships, put compliance checks in place, and assess ongoing risk before offering widespread services. But the completion of these first transactions is a concrete signal that the infrastructure is being reconnected, at least partially, after a long period of isolation. For people who send money to family in Syria, run a bu...
Czytaj więcej

SEC allows tokenised stock trading: what it means for investors

The U.S. Securities and Exchange Commission has issued an order permitting regulated platforms to trade tokenised stocks - blockchain-based digital tokens that represent ownership, or exposure to ownership, of traditional shares. This marks a shift from the previous regulatory grey area, where such products existed mostly outside the U.S. or in limited pilot programs, and gives platforms a clearer path to offer them to everyday investors. Tokenised stocks are not new as a concept. Some crypto exchanges based outside the U.S. have offered similar products for a few years, letting users buy a digital token pegged to the price of a share like a well-known tech company, without actually holding the underlying stock through a traditional brokerage account. The SEC's order effectively brings this activity into a regulated framework, meaning platforms that want to offer tokenised equities in the U.S. now have official clearance to do so, provided they meet the conditions set out in the o...
Czytaj więcej

Félix Raises $200 Million to Expand Beyond Remittances

Félix, a remittance service built around WhatsApp that lets Latino immigrants in the US send money to family abroad, has raised $200 million in combined equity and debt. The round includes $87 million in Series C equity funding. According to the company, the new capital will be used to broaden its offering beyond cross-border transfers into other financial products, though specifics on what those products will look like have not been fully detailed. Félix's model is notable for its distribution channel: rather than requiring users to download a separate app, it operates through WhatsApp, a messaging platform already widely used within immigrant communities across the US and Latin America. This lowers the barrier to entry for customers who may be less comfortable navigating a traditional banking app or website, and it has helped the company build a user base concentrated among Spanish-speaking senders. The funding round reflects a broader pattern in the remittance industry, where c...
Czytaj więcej