DriveWealth Security Incident Exposes Revolut, Stake and Hatch Customer Data

The useful part

Some customers of Revolut, Stake and Hatch have been affected by a security incident at US brokerage infrastructure provider DriveWealth. An unauthorised party accessed personal and, in some cases, investment-related information on September 4 and 5. For customers in the European Economic Area, the exposure relates to information provided under an earlier operating model.

How it works

• Revolut stopped sending new EEA customer data to DriveWealth in December 2023, meaning only records provided before then could have been involved.
• The data taken is older customer-profile… pic.twitter.com/xPO7YbOk57 — Max Karpis (@maxkarpis) September 24, 2026 Stake and Hatch Disclose Investment Data The exposure at Hatch and Stake extended beyond...
• Revolut is emailing customers about another data incident.
• DriveWealth continues to act as the clearing broker for Revolut Securities and Revolut Wealth in the United States, according to Revolut's current disclosures.
• This one is at DriveWealth, the US broker that used to handle Revolut's US share trading.DriveWealth says unauthorised access hit its systems on 4–5 September.

Details worth keeping

The categories of exposed information differed across the three platforms. Historical Revolut Records Exposed According to Revolut notifications shared publicly by affected customers, the records may include contact, employment and basic biographical information, together with part of a DriveWealth account number. Identity documents and payment details were not compromised.