Revolut Customers In Ireland Contacted Over Security Incident At US Broker DriveWealth

Revolut has contacted customers in Ireland identified as potentially affected by a security incident at DriveWealth, the third-party US broker that carried out US stock trades for Revolut customers. Revolut has said its own systems were not compromised, but is urging customers to stay vigilant against phishing attempts and scams.

In an email to potentially affected customers, seen by Cork Safety Alerts, Revolut said DriveWealth has confirmed a security incident affecting its systems which involved unauthorised access to historical personal data of some DriveWealth customers. Revolut said it is in direct communication with the DriveWealth team to confirm the exact scope of the incident.

According to Revolut, DriveWealth has indicated that the historical personal data that may be impacted includes customer profile data, such as name, email address, phone number, postal address and employment information. Biographical data, such as country of citizenship, age and gender, and a partial DriveWealth account number may also be impacted.

Revolut, in its email to customers:

"At this time, DriveWealth has no reason to believe any other personal information was affected, in particular, no passwords or financial payment information (such as credit card or bank account details) were involved."

Revolut explained that customers who originally signed up for its trading service agreed to establish contractual relationships with two entities: the Revolut Trading Entity and a brokerage account opened directly with DriveWealth, LLC in the US. The information required to open and service those accounts was shared with both.

Revolut migrated away from this arrangement for EEA customers in December 2023, and said personal details have not been shared with DriveWealth since then, so only information from before December 2023 could be affected. DriveWealth retained the information where required to fulfil its legal and regulatory obligations.

Revolut, in its email to customers:

"Your account can't be accessed solely with the information involved in this incident, and we haven't detected any unauthorised activity on your account."

Revolut added that no Revolut passwords, passcodes, card details or ID documents were exposed.

Customers are being reminded that neither Revolut nor DriveWealth will ever ask for a passcode, password or card details, and neither company will ever instruct customers to move money to another account for safekeeping. Anyone contacted with requests for sensitive information, or urged to transfer funds, should not engage and should report it via Revolut's in-app chat, available 24/7, or by emailing support@revolut.com.

For more details on the incident, Revolut recommends visiting the DriveWealth website or contacting accountsecurity@drivewealth.com.

Revolut customers in Ireland are being contacted over a security incident at US broker DriveWealth. No passwords or card details involved. Be alert to scams.