On September 12, Revolut confirmed it fell victim to a sophisticated phishing attack that led to a data breach. The incident resulted in the unauthorized handover of sensitive customer files to third parties. Compromised data included personal identification documents such as passports and selfies, as well as Bitcoin-related records.