Czech financial group Partners confirmed a cyberattack on IT infrastructure the Sunday before 27 August 2026. Co-founder Petr Borkovec said attackers missed production systems, Partners Banka, and client money - but reached backups and non-production environments. Hit were Partners Financial Services, insurer Simplea, pension firm Rentea, Partners investicni spolecnost, and Slovak Simplea Financial Services. The group has about 600,000 customers; it has not said how many records leaked. Confirmed categories: IDs, contacts, contract data, and call-centre recordings through 2021, plus possibly investment questionnaires and insurance claims. Partners has not named a group. A listing later appeared on INC Ransom's leak site (also logged as Partners HoldCo, Czech Republic, around 16-17 September). INC Ransom's own dump - full Active Directory, golden-ticket material, 1.3 million recordings, Veeam images, 1.5-2.5 TB - is a criminal claim, not a Partners confirmation. INC Ransom is a RaaS crew active since 2023; trackers put it near 900+ named victims.

Revolut is a different failure. The company said it was not hacked. It answered fraudulent law-enforcement requests that arrived from a real Italian government domain - reportedly a PEC account tied to the Reggio Calabria prefecture - and handed over data on roughly 680 customers. Exposed items include dates of birth, addresses, emails, phones, and copies of passports and driving licences; some files may include KYC selfies, IBANs and transaction history. The UK ICO opened an investigation after Revolut self-reported. Italian postal police and Reggio Calabria prosecutors are probing possible abuse of a state mailbox. A Telegram actor calling itself iamnotavillain claimed a $3 million / 6,000 XMR ransom and 147 GB of Italian law-enforcement files; Revolut has not confirmed any negotiation. Funds were not moved.

The lesson is not "banks are insolvent." Deposit insurance and isolated core banking still matter. The lesson is identity: leaked calls, IDs and KYC photos feed phishing for years after the vault is locked. Watch official mail from Partners and Revolut, treat unexpected "bank" or "police" requests as hostile, and freeze or replace documents if you are in the notified set.