Mandatory cookies enable the main website functions. Without the aforementioned cookies the website cannot function properly. These cookies can be turned off only by changing the browser settings.
Analytical cookies allow us to improve the website by collecting and providing information about its usage.
Language selection cookies
The language selection cookies remember the language you have selected.
Selected cookies
My Government BETA
lt Language
Sitemap lt Language For persons with disabilities
E. citizen
For the disabled
State Data Protection Inspectorate
Į pradžią Newsletter subscription
Administration chart
SolPriPa PROJECT
SolPriPa 2 WORK project
Decisions of the Inspectorate (fines, orders, etc.)
The State Data Protection Inspectorate has Initiated an Investigation Regarding Personal Data Breach in "Revolut"
The State Data Protection Inspectorate (hereinafter referred to as SDPI), having received a notification of a personal data breach (hereinafter referred to as the PDB) from UAB "Revolut Bank", UAB "Revolut Insurance Europe", on its own initiative started an investigation into the aforementioned companies in order to assess whether there was a violation of the provisions of the General Data Protection Regulation (hereinafter referred to as the GDPR).
Brief information about the PDB:
According to preliminary data, access to the "Revolut" database was obtained through the use of social engineering methods;
Upon noticing the security incident, "Revolut's" security team took prompt action to eliminate the malicious attacker's access to the company's customer data and stop the incident;
According to the information provided, the data of about 50 150 customers worldwide (20 687 of them in European Economic Area), such as names, addresses, e-mail addresses, telephone numbers, part of the payment card data (according to the company, the cards numbers were masked), account details etc., could have been potentially affected during the incident.
The number of potentially affected users in Lithuania – 379.
The company stated that it is communicating with those customers whose personal data confidentiality was violated during this incident.
Customers are informed of the PDB by e-mail, they are provided with answers to questions they may have, and it is confirmed that funds in their accounts are not at risk, the steps "Revolut" has taken to protect customers are explained, etc.
"Revolut" is currently continuing its investigation into the cyber incident and personal data breach.
"Revolut" points out that it will not call or send SMS messages to its customers or ask for login data or access codes due to the incident, therefore any attempts to contact should be treated with suspicion.
Considering the fact that SDPI has already started an investigation on its own initiative concerning a possible personal data breach in the mentioned organisations, separate complaints of individuals shall not be considered. More information will be released after the investigation is complete.
Advice on Personal Data Security
SDPI urges residents to be alert and attentive in cyberspace. Cybercriminals are constantly looking for ways to make money at your expense and try to exploit human emotions in order to extract the information they need directly from you using social engineering techniques. Scammers usually follow the same principle – they try to force you to take actions without thinking about them after starting an emotional conversation.
Malicious attackers and fraudsters may try, using the publicised information about this breach of personal data security, to trick you with various login or other important personal data, offer some fictitious services and ask you to pay for them.
Be critical of who you provide your personal data to. Banks and other legitimate organisations or institutions usually do not ask for login data and personal information via e-mail, telephone or social networks. Be wary of any e-mail or SMS message that asks you for any personal information, and if in doubt, try to contact the official contact number of that organisation and ask what your personal data will be used for.
In order to protect yourself from various types of fraud and methods of enticing personal data, check the information provided or consult with reliable people before taking actions that could potentially harm you.
Another important factor is mindfulness, because social engineering relies on rushing the victims to make decisions without thinking and weighing their necessity, expecting them to act impulsively and irrationally. Do not make decisions in a rush and do not succumb to pressure.
In cases where e-mail addresses and telephone numbers are leaked, people may be exposed to potentially malicious SMS, e-mails or calls from scammers. SDPI urges people not to click on links received by e-mail or SMS, not to share their passwords, PIN codes, to be careful and critically evaluate the information they receive.
Meeting of Personal Data Protection Supervisory Authorities of Three Baltic States Supervisory authorities of the Baltic States launch of coordinated inspection of the compliance of personal data processing in the field of short-term vehicle rental Annual Report of Personal Data Protection Supervision in Lithuania in 2021 The Level of the Conditions of Protection of Personal Data Has Been Estimated in Lithuania for the First Time State Data Protection Inspectorate has approved the standard contractual clauses
Data about the Inspectorate is collected and stored in the Legal Person's Register. Registration code 188607912
L. Sapiegos str. 17, LT-10312 Vilnius, Phones: +370 5 271 2804 / 279 1445, Fax +370 5 261 9494, E-mail [email protected]
Consultations by phone +370 5 212 7532
Monday–Thursday 9–11 AM and 1–3 PM
© Government of the Republic of Lithuania