Hackers Demand Record Ransom from Revolut After Stealing Customer Data
People claiming to be involved in the Revolut customer data breach are demanding 10,000 bitcoins from the company. This is equivalent to over $782 million.
According to The Register, related messages have appeared in several Telegram groups. The attackers are threatening to publish more and more information every day if the fintech company does not meet their demands.
“We will release more and more data every day until Revolut pays for the leak of its customers’ information,” one of the messages states.
The publication also reviewed data snippets allegedly belonging to well-known individuals—including company executives, athletes, and entertainment industry figures. Revolut declined to comment on the ransom demand.
The company has already confirmed the data breach itself. According to its account, a third party used an email address from a legitimate government agency domain to send fraudulent requests for information.
“Revolut recently uncovered a sophisticated external fraud scheme in which an unauthorized third party used an email address from a legitimate government agency’s domain to submit fraudulent requests for information,” a company spokesperson stated.
Revolut has not disclosed either the name of the agency whose domain was used by the attackers or the exact number of affected customers. The company only notes that the number of users involved is limited.
At the same time, the messages Revolut sent to the affected users, which have been made public, indicate that a significant amount of sensitive information may have been compromised. This includes copies of passports or driver’s licenses, verification selfies, names, dates of birth, home and email addresses, phone numbers, and occupations.
IBANs, bank statements, withdrawal data, and complete transaction histories—including Bitcoin transactions—may also have been exposed.
After discovering the incident, Revolut blocked the IP address from which the requests originated and notified the relevant government agency, law enforcement, and financial regulators.
“Revolut’s systems and customer funds were not compromised. We have directly contacted a limited number of affected individuals to notify them and provide support,” the company stated.
Source: The Register.
In the UK, Revolut disclosed customer data due to fraudulent requests made on behalf of a government agency — TechCrunch.
Revolut, founded by Staron, is preparing for a $115 billion valuation ahead of its IPO
