From the PR statement, it's unclear if a gov. agency was hacked or it was a phishing attempt, from my point of view. Both cases are still not enough, even for a greasy spoon.
If the Revolut know the agency was hacked it surely would be in their interest to say so (unless the agency hold them at "gunpoint")
If the Revolut know the agency was hacked it surely would be in their interest to say so (unless the agency hold them at "gunpoint")