British fintech Revolut confirmed that it disclosed sensitive customer information to an unauthorized third party after receiving fraudulent requests sent from a legitimate government agency email domain. The exposed data included customers’ identity and contact details, including their birth date, postal and email addresses, and phone numbers, as well as copies of their identity documents including passports and driver’s licenses, according to a notification emailed to affected customers and reviewed by TechCrunch. The data may have also included verification selfies, account statements, and transaction histories, the firm said in its notification.

Revolut is asking me to re-submit my documents to confirm my identity as they “have expired”. Not sure if I should bother, considering I have another bank and stuff like this is happening. The only thing I use it for is the virtual cards but honestly I haven’t been using them all that much these past months.