Phishing via gov domain hits 680 Revolut customers, 27 in Romania

A phishing campaign compromised sensitive data of ~680 Revolut customers, including 27 Romanians, by spoofing a legitimate government agency email domain. The breach exposed identity documents and bank statements, indicating a targeted social-engineering operation. The full scope and method of domain compromise remain unclear, but the incident underscores credential-phishing risks in fintech.