Financial technology company Revolut has suffered a data breach affecting over 50,000 of their customers. In a statement given by a company spokesperson, Revolut identified an unauthorized third party that “had access for a short period of time,” to the sensitive information of 0.16% of their customer base. The organization has sent emails to the affected customers, most of which are located in the “European Economic Area,” as well as Lithuania. The leaked information includes customers email addresses, full names, postal addresses, phone numbers, and other account data. In an email sent by Revolut, the organization states the type of compromised data varies per customer, though card details, PINs, and passwords were not accessed. The company also stressed that customers’ funds have not been accessed and a team has been created to monitor customer accounts and ensure their users’ funds are secure. The initial attack vector has not been disclosed, though it appears the threat actor used some form of social engineering. Shortly after the incident, customers noticed Revolut’s support chat had been defaced with vulgar messages replacing the help text. While customers’ financial accounts may be safe from the threat actor, other hackers are taking advantage of the leaked data. Threat actors have begun smishing (SMS phishing) the affected customers by sending messages spoofing Revolut’s automated phone number. Users received a fraudulent text message stating a new card was being shipped to them, prompting them to click on a provided link and enter their details. The phishing site asks for a user’s phone number, passcode, full name, date of birth, as well as their current debit card attached to the account. Using this information, the threat actor can perform online transactions with the user’s card details or send money to accounts they control. CTIX analysts will continue to monitor this situation and will provide updates for any future developments.