DriveWealth confirmed unauthorized network access between September 4 and 5, 2026, after attackers used social engineering to obtain access to systems containing historic customer records. The incident affected data linked to Revolut users’ past US share trading, including thousands of customers in Ireland, but not Revolut’s own systems, funds or accounts. Revolut stopped sharing new EEA customer information with DriveWealth in December 2023, so recent users were not affected by this incident; older records remained with the former broker under regulatory retention requirements. Potentially exposed information includes names, email addresses, phone numbers, postal addresses, employment details, citizenship, age, gender and partial DriveWealth account numbers. Passwords, payment-card details, bank information, Revolut passcodes and identity documents were not compromised, and no unauthorized trades, withdrawals, transfers or account changes were identified. DriveWealth’s production brokerage, trading and client-facing systems continued operating normally. Stake and Hatch, which also use DriveWealth’s infrastructure, reported similar exposure. Neither DriveWealth nor Revolut has disclosed the number of affected Revolut customers; Revolut serves about 3.4 million customers in Ireland. The incident is separate from an earlier September impersonation scam in which fraudulent requests sent from a genuine Italian government email domain led Revolut staff to release identity documents and other sensitive data involving roughly 680 customers globally. Affected users have been advised to watch for phishing and contact Revolut through official channels.