Cyber Security News

Hacking Editorial Brief — September 15, 2026

Revolut Social Engineering Attack Exposes Nearly 700 Customer Records

Fintech platform Revolut disclosed that attackers successfully social engineered company personnel into handing over private customer data for nearly 700 users. The threat actors impersonated government officials to deceive Revolut staff into providing customer IDs, addresses, and other personal details. The incident occurred over the weekend and represents a targeted social engineering campaign exploiting human rather than technical vulnerabilities. Revolut has contacted affected customers, though the full scope of data misuse and whether additional financial fraud has occurred remains under investigation. The breach highlights persistent risks in customer service and compliance workflows where impersonation tactics can bypass technical security controls.

Canadian National Pleads Guilty to Breaching 165 Companies, Exposing 100 Million Records

A 26-year-old Canadian hacker has pleaded guilty to compromising 165 companies in a campaign that began in early 2024 and exposed data linked to approximately 100 million individuals. The operation extended beyond directly targeted organizations, suggesting supply chain or third-party data aggregation as part of the broader exposure. Investigative work eventually led to identification and prosecution, though the guilty plea represents one of the larger-scale breach admissions in recent years by individual count and exposure volume. Details on the attack methodology, targeted sectors, and whether data was monetized or distributed remain limited in public reporting.

Sources: City AM · Financial Times · Times of India