Phishing texts target bank customers after data leak

Malwarebytes Labs covered this vulnerability on Sep 17, 2026. Below is a plain-English breakdown of what it is, how it actually works, and whether it matters, written for people who are curious about hacking and security but don't have a technical background.

Malwarebytes Labs · Sep 17, 2026

In plain words

Imagine you have a mailbox where you receive important letters, but someone has your address and is sending you fake letters to trick you into giving them your secrets. This is similar to what is happening with phishing texts.

What's broken

The phishing texts are trying to trick Revolut customers into giving away their sensitive information, and this is happening after the bank had a data breach where customer data was disclosed to someone pretending to be a government official.

How it actually works

Here's how it works: first, there was a data breach at Revolut, which means someone got access to customer information¹. Then, the attackers used this information to send phishing texts to the customers, trying to trick them into revealing more sensitive information, like passwords or credit card numbers. The attackers are pretending to be Revolut in these texts, which is a common technique called spoofing².

Proof of concept

It is not clear from the source if there is a public proof-of-concept for this specific phishing campaign, but the fact that phishing texts are being sent out shows that the attackers are actively trying to exploit the leaked data.

Is it real

It seems like the phishing campaign is actively happening, targeting Revolut customers, but it is not clear how widespread it is or how long it has been going on. The data breach at Revolut and the following phishing campaign show that the attackers are moving quickly to exploit the leaked information.

What to do

To protect themselves, Revolut customers should be cautious of any texts that ask for sensitive information and verify the identity of the sender before responding. Revolut should also take steps to secure the leaked customer data and prevent further phishing attacks.

Terms

¹ customer data: , customer information, such as names, addresses, and phone numbers, that was accessed without authorization
² spoofing: , a technique used by attackers to disguise themselves as a trusted entity, like a bank, to trick victims into revealing sensitive information

About this explainer

KeepLooped tracks the newest offensive-security tools, techniques, vulnerabilities and research from 80+ trusted sources and turns the most important items into plain-language explainers, so people learning security can keep up without a technical background. This page summarises and explains the source linked below; it was produced with AI assistance and is meant as a beginner-friendly starting point. Always confirm specifics, versions, CVE details, and exploitation status, against the original source and official advisories. Curated and published by HackproofHacks.