Unknown hackers gained access to DriveWealth, a leading U.S. broker. DriveWealth provides clearing infrastructure for Revolut’s U.S. stock trading service. The hackers gained access on September 4 and 5 via a social engineering attack using a vulnerability in a third party service provider. DriveWealth has not yet identified which third party service provider was exploited by the hackers but confirmed that the attack was mounted through social engineering. The exposed data includes names, email and postal addresses, phone numbers, employment details, citizenship, age, gender, and partial DriveWealth account numbers.

Full report : U.S. stockbroker DriveWealth data breach exposes personal data of Revolut US stock traders.