27/09/2026
Two data breaches in one month, and neither needed any fancy hacking. Both started with someone pretending to be someone else. 🎭
If you're a Revolut customer in Ireland, you might have seen this in the news.
On 14 September, it came out that criminals had sent Revolut fake information requests from a genuine government agency's email domain. Revolut was deceived and handed over customer data, including passport and driving licence copies, dates of birth and addresses. Around 700 customers worldwide were affected, about 12 of them in Ireland.
Then on 24 September, a second one. DriveWealth, a US broker that used to carry out US stock trades for Revolut customers, said attackers got into its network in early September using what it called a sophisticated social engineering campaign. For European customers the data is historical, from before December 2023, things like names, contact details, addresses and employment info. Revolut says its own systems weren't compromised, funds are safe, and no passwords or card details were exposed.
So what does this mean for a small business? Two things.
A trusted email address isn't proof on its own. If a request asks for sensitive info, a payment or new bank details, ring the person back on a number you already have.
And your data can hang around long after you stop using a supplier. It's worth asking old providers what they still hold.
We help Irish businesses set up proper email security and anti-phishing protection, plus simple checks so a convincing request doesn't catch anyone out. Curious where your business stands? Let's talk 👋