Irish Revolut customers impacted by data breach

Revolut customers in Ireland are among those impacted by a data breach at a third-party provider.

DriveWealth, a US broker that carries out US stock trades for Revolut customers, has said a security incident affecting its systems involved unauthorised access to historical personal data of some DriveWealth customers.

"Revolut is in direct communication with the DriveWealth team to confirm the exact scope of the incident," Revolut said in an email to customers.

DriveWealth said that the historical personal data that may be impacted includes customer profile data, such as name, email address, phone number, postal address and employment information.

Also potentially accessed was biographical data, such as country of citizenship, age, and gender, as well as partial DriveWealth account numbers.

"At this time, DriveWealth has no reason to believe any other personal information was affected, in particular, no passwords or financial payment information (such as credit card or bank account details) were involved," Revolut said in its email to customers.

A Revolut spokesperson said its systems and infrastructure were not accessed or compromised, and customer funds and investments are safe.

"No Revolut passwords, passcodes, card details, or ID documents were exposed," the company said.

Revolut said that in Europe, the incident relates to historical records dating from before it changed its US stock trading model.

"We implemented these changes between December 2023 and June 2025 depending on the market," Revolut said.

"Since then, individual customers' personal details in these markets have not been shared with DriveWealth, and as a result are not affected."

"DriveWealth has contacted affected customers directly, and we have followed up with our own email to explain what it means for them. If you haven't received an email, you are not affected," the company added.

This is the second data breach affecting Revolut customers this month.

On 14 September, the fintech company told some of its customers that copies of their passports and driving licenses, along with their dates of birth, home addresses, email addresses and phone numbers, were handed to criminals.

In that instance, Revolut said an "unauthorised third party" used an email domain from a legitimate government agency to submit "fraudulent requests for information".

The company did not say how many people were affected by that breach, or where they live - however, it was reported at the time that around 700 customers globally were impacted, with around 12 of those based in Ireland.