Revolut exposed customers’ personal data because of a fraudulent government email

Revolut disclosed sensitive data belonging to a limited number of customers to an unauthorized third party after a fraudulent information request sent from within an actual government agency’s domain infrastructure passed its checks. The scope was not disclosed.