Client Services Specialist

Revolut data breach at DriveWealth follows impersonation incident. DriveWealth confirmed unauthorised access to its network on 4 and 5 September, adding to a separate impersonation case disclosed earlier in the month. Get the hottest Fintech Switzerland News once a month in your Inbox A data incident at US broker DriveWealth has affected Revolut customers, BeInCrypto reported. The broker has supported Revolut's US stock trading service. It is the second case involving Revolut customer data in September. Neither company has disclosed how many Revolut customers are involved. In a statement on its website, DriveWealth said unauthorised access to its network took place on 4 and 5 September. BeInCrypto reported that DriveWealth attributed the access to social engineering. Instead of breaking into software, this approach works by misleading people into handing over access or information. A Revolut spokesperson told The Irish Times that in the UK, the European Economic Area (EEA) and Australia, the incident involves older records from before Revolut changed how it runs US stock trading. In the EEA, including Ireland, this change took place in December 2023. The spokesperson said individual customer details in these markets have not been shared with DriveWealth since then, so more recent users there are not affected. According to BeInCrypto, the records may contain names and contact details, such as email addresses, phone numbers and postal addresses. They may also include employment information, citizenship, age, gender and partial DriveWealth account numbers. Earlier in September, a separate incident saw Revolut release sensitive data in response to requests from impersonators using a legitimate government email domain. Featured image: Edited by Fintech News Switzerland, based on image by Revolut via its website.

Stake data breach exposes customer details after hack at partner DriveWealth. Andrew HedgmanNewsWire Thu, 24 September 2026 11:02PM The No. 1 source of news for every west australian. No lock-in contract / week for 8 weeks, billed weekly. Pay in advance Annual Digital Save $104! Billed as $312 per annum. Pay as you go Digital + Weekend Newspapers Billed monthly or quarterly. All access digital Daily Digital Edition Need help with a subscription? Call us at 1800 811 855

DriveWealth security breach exposes personal data of Revolut, Stake, and Hatch users. Verified 26 votes Updated 7 hours ago A security breach at DriveWealth, a US brokerage infrastructure provider, hit customers of Revolut, Stake, and Hatch on September 4 and 5. Unauthorized access to personal data - and in some cases investment-related records - got through. The damage wasn't uniform across the three platforms. Discover more Compare Investment Apps Investment DriveWealth said the breach came from a social-engineering campaign. Someone talked their way into the systems, basically. The company confirmed the issue was contained and stressed that no unauthorized trades, transfers, or withdrawals happened as a result. But affected customers are now being warned about phishing and impersonation risks, since real personal data is floating around out there. What each platform lost. For Revolut users, the exposed data was older. The Currency Analytics is talking historical records - contact details, employment info, basic biographical data, and partial DriveWealth account numbers. Identity documents and payment details weren't touched. Revolut stopped sending new European Economic Area customer data to DriveWealth back in December 2023 when its operating model changed, so current EEA customers are probably clear. DriveWealth still acts as the clearing broker for Revolut Securities and Revolut Wealth in the US, so the relationship isn't fully severed - it's just narrower now. Stake and Hatch users got hit harder. Hatch customer records may include income ranges, cash balances, and total portfolio values. For Stake users, the exposed data covered tax status, country of taxation, DriveWealth account numbers, and overall portfolio summaries. That's a more detailed financial snapshot than what Revolut customers lost, and it's the kind of data that makes phishing attempts more convincing. Discover more Open Trading Account Compare Exchange Rates Investment Both Stake and Hatch confirmed their own internal systems weren't touched. The breach stayed inside DriveWealth's environment. Social engineering, not a hack. DriveWealth didn't get cracked through some sophisticated zero-day exploit. It's a social-engineering story - someone manipulated their way in. The company told its partners the incident was contained fast, and there's no sign of unauthorized financial activity. Still, "contained" doesn't mean the data disappeared. Once names, tax statuses, and portfolio summaries are out, they're out. Revolut was quick to clarify that the compromised records only covered older data, stuff shared before December 2023. That's a meaningful distinction - it means the breach doesn't reflect the current state of Revolut's customer base in Europe. Customers who signed up or updated their profiles after that model change aren't in this pool. Whether that's reassuring depends on how long you've been a Revolut customer, and the platform isn't specifying exactly how many people are affected. Stake and Hatch, for their part, said they're working with DriveWealth to tighten things up and prevent future incidents. No details on what that actually looks like in practice. Unclear whether any regulatory notifications beyond customer alerts are planned. Discover more Take Economics Courses Compare Exchange Rates Separate from the earlier Revolut incident. Worth being clear here: this DriveWealth breach is a different thing from the earlier Revolut incident that made headlines. In that older case, attackers used a compromised Italian government email account to fraudulently request information directly from Revolut. That breach involved the unauthorized acquisition of Know Your Customer documents and transaction records for roughly 680 Revolut customers. Different method, different data, different scope. The DriveWealth breach is broader in terms of platforms affected - three companies, not one. But the financial exposure so far seems limited to data theft rather than actual fund movement. DriveWealth is firm on that point. It's worth noting that brokerage infrastructure providers sit at a tricky intersection. They power the backend for multiple consumer-facing apps simultaneously, which means a single breach can ripple across platforms that have no direct relationship with each other. Revolut, Stake, and Hatch compete for similar users in some markets. They share a backend provider. And now they share a breach. Take Economics Courses Social-engineering attacks on financial infrastructure aren't new, and they're not going away. Regulators in multiple jurisdictions have flagged the risk for years. Whether DriveWealth faces any formal scrutiny over this incident hasn't been confirmed. Customers on all three platforms are being urged to watch for suspicious emails or messages that reference their real account details - because whoever accessed the data now has enough to make a phishing attempt look legitimate. Stake and Hatch users especially, given the financial data involved. DriveWealth confirmed no unauthorized financial activity was detected. Stake and Hatch confirmed their own systems were clean. Revolut confirmed the older-data-only scope of its exposure. And all three consumer platforms have pushed notifications to affected users. The breach dates: September 4 and 5. Frequently asked questions. What personal data was exposed in the DriveWealth breach for Revolut customers? Were Stake and Hatch customers' financial details exposed in the DriveWealth breach? Why it matters. This breach underscores the vulnerabilities that exist within the financial technology sector, particularly as companies increasingly rely on third-party service providers for brokerage and trading infrastructure. The incident not only raises concerns about the security of user data across multiple platforms but also highlights the potential risks associated with social engineering tactics, which can undermine consumer trust in digital financial services. As the crypto and broader financial markets continue to evolve, maintaining robust cybersecurity measures will be crucial for protecting user assets and sustaining market confidence. Trade Crypto Assets Community Trust Index High Confidence Real85% 15%Fake 26 community signals Post Views: 29