Stake data breach exposes customer details after hack at partner DriveWealth. Andrew HedgmanNewsWire Thu, 24 September 2026 11:02PM The No. 1 source of news for every west australian. No lock-in contract / week for 8 weeks, billed weekly. Pay in advance Annual Digital Save $104! Billed as $312 per annum. Pay as you go Digital + Weekend Newspapers Billed monthly or quarterly. All access digital Daily Digital Edition Need help with a subscription? Call us at 1800 811 855

DriveWealth security breach exposes personal data of Revolut, Stake, and Hatch users. Verified 26 votes Updated 7 hours ago A security breach at DriveWealth, a US brokerage infrastructure provider, hit customers of Revolut, Stake, and Hatch on September 4 and 5. Unauthorized access to personal data - and in some cases investment-related records - got through. The damage wasn't uniform across the three platforms. Discover more Compare Investment Apps Investment DriveWealth said the breach came from a social-engineering campaign. Someone talked their way into the systems, basically. The company confirmed the issue was contained and stressed that no unauthorized trades, transfers, or withdrawals happened as a result. But affected customers are now being warned about phishing and impersonation risks, since real personal data is floating around out there. What each platform lost. For Revolut users, the exposed data was older. The Currency Analytics is talking historical records - contact details, employment info, basic biographical data, and partial DriveWealth account numbers. Identity documents and payment details weren't touched. Revolut stopped sending new European Economic Area customer data to DriveWealth back in December 2023 when its operating model changed, so current EEA customers are probably clear. DriveWealth still acts as the clearing broker for Revolut Securities and Revolut Wealth in the US, so the relationship isn't fully severed - it's just narrower now. Stake and Hatch users got hit harder. Hatch customer records may include income ranges, cash balances, and total portfolio values. For Stake users, the exposed data covered tax status, country of taxation, DriveWealth account numbers, and overall portfolio summaries. That's a more detailed financial snapshot than what Revolut customers lost, and it's the kind of data that makes phishing attempts more convincing. Discover more Open Trading Account Compare Exchange Rates Investment Both Stake and Hatch confirmed their own internal systems weren't touched. The breach stayed inside DriveWealth's environment. Social engineering, not a hack. DriveWealth didn't get cracked through some sophisticated zero-day exploit. It's a social-engineering story - someone manipulated their way in. The company told its partners the incident was contained fast, and there's no sign of unauthorized financial activity. Still, "contained" doesn't mean the data disappeared. Once names, tax statuses, and portfolio summaries are out, they're out. Revolut was quick to clarify that the compromised records only covered older data, stuff shared before December 2023. That's a meaningful distinction - it means the breach doesn't reflect the current state of Revolut's customer base in Europe. Customers who signed up or updated their profiles after that model change aren't in this pool. Whether that's reassuring depends on how long you've been a Revolut customer, and the platform isn't specifying exactly how many people are affected. Stake and Hatch, for their part, said they're working with DriveWealth to tighten things up and prevent future incidents. No details on what that actually looks like in practice. Unclear whether any regulatory notifications beyond customer alerts are planned. Discover more Take Economics Courses Compare Exchange Rates Separate from the earlier Revolut incident. Worth being clear here: this DriveWealth breach is a different thing from the earlier Revolut incident that made headlines. In that older case, attackers used a compromised Italian government email account to fraudulently request information directly from Revolut. That breach involved the unauthorized acquisition of Know Your Customer documents and transaction records for roughly 680 Revolut customers. Different method, different data, different scope. The DriveWealth breach is broader in terms of platforms affected - three companies, not one. But the financial exposure so far seems limited to data theft rather than actual fund movement. DriveWealth is firm on that point. It's worth noting that brokerage infrastructure providers sit at a tricky intersection. They power the backend for multiple consumer-facing apps simultaneously, which means a single breach can ripple across platforms that have no direct relationship with each other. Revolut, Stake, and Hatch compete for similar users in some markets. They share a backend provider. And now they share a breach. Take Economics Courses Social-engineering attacks on financial infrastructure aren't new, and they're not going away. Regulators in multiple jurisdictions have flagged the risk for years. Whether DriveWealth faces any formal scrutiny over this incident hasn't been confirmed. Customers on all three platforms are being urged to watch for suspicious emails or messages that reference their real account details - because whoever accessed the data now has enough to make a phishing attempt look legitimate. Stake and Hatch users especially, given the financial data involved. DriveWealth confirmed no unauthorized financial activity was detected. Stake and Hatch confirmed their own systems were clean. Revolut confirmed the older-data-only scope of its exposure. And all three consumer platforms have pushed notifications to affected users. The breach dates: September 4 and 5. Frequently asked questions. What personal data was exposed in the DriveWealth breach for Revolut customers? Were Stake and Hatch customers' financial details exposed in the DriveWealth breach? Why it matters. This breach underscores the vulnerabilities that exist within the financial technology sector, particularly as companies increasingly rely on third-party service providers for brokerage and trading infrastructure. The incident not only raises concerns about the security of user data across multiple platforms but also highlights the potential risks associated with social engineering tactics, which can undermine consumer trust in digital financial services. As the crypto and broader financial markets continue to evolve, maintaining robust cybersecurity measures will be crucial for protecting user assets and sustaining market confidence. Trade Crypto Assets Community Trust Index High Confidence Real85% 15%Fake 26 community signals Post Views: 29

Revolut discloses two data breaches via DriveWealth social engineering attack. 2026-09-24 10:05:41 Key takeaways. * Revolut disclosed two data breaches this month after DriveWealth suffered social engineering attacks on September 4 and September 5. * The breaches compromised customer names, emails, ages, genders, citizenship information, postal addresses, and employment details. * The hacker published the "Italy Files" containing 680 crypto whales' data after ransom negotiations failed. UK bank Revolut disclosed that customer data was breached twice this month after its former third-party US broker DriveWealth suffered a social engineering attack on September 4 and September 5. The breach compromised names, emails, ages, genders, citizenship information, postal addresses, and employment details. The incident follows an earlier breach this month where hackers used an Italian government email to access Revolut's data. DriveWealth breach compromises customer profile data. Both Revolut and DriveWealth revealed the breach today. DriveWealth, which previously handled Revolut's US share trading, experienced unauthorized access to its systems on September 4 and September 5. The compromised data includes customer profile information such as names, emails, ages, genders, citizenship details, postal addresses, and employment information. The breach does not include data from affected European Economic Area customers past 2023. Neither Revolut nor DriveWealth disclosed how many users were impacted or provided details about the social engineering attack method. Revolut stated that core infrastructure, funds, and accounts were not impacted by the breach. Hacker publishes data after failed ransom negotiations. Ransom demands following the earlier email attack ranged from $760 million in BTC to $3 million in XMR. The hacker claimed that "negotiations didn't go as planned" and published the "Italy Files," which include data of 680 crypto whales. Journalist Jason Mikula noted that the hacker is selling the data at 10x cheaper than their ransom demand, suggesting "the group is struggling to monetize the data they have exfiltrated." The hacker is also reportedly offering impacted users, including Mt. Gox CEO Mark Karpelès, the opportunity to pay to prevent their information from being leaked. Faq. What data was compromised in the Revolut DriveWealth breach? The breach compromised names, emails, ages, genders, citizenship information, postal addresses, and employment details of Revolut customers. The breach does not include data from affected European Economic Area customers past 2023. What ransom demands did the hacker make after the Revolut breach? Ransom demands ranged from $760 million in BTC to $3 million in XMR. The hacker later published the "Italy Files" containing data of 680 crypto whales after claiming negotiations failed, and is now selling the data at 10x cheaper than the original ransom demand. Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.