Irish customers of digital banking platform Revolut are among those affected by a data breach at an external service provider, the company confirmed on 24 September 2026. The security incident involves a third-party supplier rather than Revolut’s own systems, though the fintech firm has not disclosed the full scope of the breach or the number of Irish users impacted.
The London-headquartered financial technology company, which holds a banking licence in Ireland and serves hundreds of thousands of customers across the country, notified affected users following the discovery of the security compromise at its third-party vendor.
Key facts
- Data breach occurred at a third-party provider used by Revolut, not Revolut’s own systems
- Irish customers are confirmed to be among those affected by the security incident
- Breach was disclosed by Revolut on 24 September 2026
- Revolut operates in Ireland under a banking licence and serves a substantial customer base
Third-Party Security Vulnerabilities
The incident highlights the ongoing challenges financial institutions face in managing security risks across their supply chains. While Revolut’s own infrastructure was not directly compromised, the breach underscores how digital banks remain vulnerable through their relationships with external technology and service providers.
Financial technology firms typically rely on numerous third-party vendors for services ranging from identity verification and payment processing to cloud infrastructure and customer communications. Each external relationship represents a potential entry point for cyber criminals seeking to access sensitive customer information.
Growing Concerns Over Fintech Security
The data breach comes at a time when Irish and European regulators are intensifying their scrutiny of cybersecurity practices within the financial services sector. The Central Bank of Ireland has repeatedly emphasised the importance of robust data protection measures and third-party risk management as digital banking continues its rapid expansion across the Irish market.
Revolut has not yet provided detailed information about what specific customer data may have been exposed in the breach, nor has it confirmed whether financial information or account credentials were compromised. The company is expected to communicate directly with affected customers regarding any steps they need to take to protect their accounts.
This latest security incident adds to growing concerns about data protection in the fintech sector, where rapid growth and heavy reliance on technology infrastructure can sometimes outpace security investments. Irish customers of digital-only banks have become increasingly vocal about their expectations for transparency and robust security measures following several high-profile breaches in the financial services industry in recent years.
Revolut has built a significant presence in Ireland since entering the market, offering current accounts, savings products, and cryptocurrency trading services to customers across the country. The company’s Irish operations are supervised by the Central Bank of Ireland under European banking regulations.
Reporting based on original coverage by the original source.
