An external information request on September 14 could, even without touching funds, still create significant data-related risks. Cointelegraph reported on September 13 that Revolut disclosed an incident in which some client information was affected by a request made using a compromised identity.

EasyMarkets indicated that this event underscores the need for the market to treat client data, account access, and fund custody as separate matters, as these three elements do not share identical protective boundaries. The company stated that its systems and client funds remain unaffected, and affected users have been notified.

Drawing on this explanation, EasyMarkets believes that assessing the severity of such an event requires a precise distinction between confirmed facts and aspects still under investigation. Data exposure should not be broadly interpreted as fund theft, nor should the fact that funds remain untouched lead to overlooking the possibility of personal information being misused later.

The core challenge of information verification lies in the reality that a seemingly credible communication channel does not necessarily represent genuine authorization. An effective process must verify the purpose of the request, the scope of data involved, and the intended recipient, while also confirming through independent channels when necessary. Limiting the amount of information disclosed in each instance and maintaining approval records can reduce the volume of data exposed to abnormal requests and provide a basis for tracing events after they occur.

For requests involving sensitive data, the review process should retain sufficient documentation to allow for the reconstruction of the information flow path and processing rationale if issues are discovered. From a service evaluation perspective, EasyMarkets analyzed that the clarity of subsequent disclosures, whether affected users receive targeted support, and how verification processes are corrected will all play a role in restoring trust.

The value of this individual case lies in revealing specific operational gaps. When evaluating other service providers, judgments should still be based on their respective information management arrangements and actual records.