Revolut Attackers Threaten Daily Leaks of Customer Data
Threat actors who accessed sensitive Revolut customer information have started posting personal data online and are threatening to release more every day until Revolut meets their demands. The leaked data includes photos and identity documents of public figures, along with comprehensive customer details such as transaction and Bitcoin records.
Details of the leak and data exposed
According to a post by International Cyber Digest on X (formerly Twitter), the leaked information includes selfies and identity document copies of tennis player Alexander Shevchenko and Gamdom CEO Felix Römer.
The attackers, communicating on Telegram, announced intentions to post more data every day until Revolut 'pays'—implying a ransom demand. The exposed ID documents and facial verification images heighten risks of identity theft and fraud for affected customers.
Revolut's response and incident context
Revolut confirmed the leak was caused by a "sophisticated external impersonation scam," where the attacker used an email address from a legitimate government agency domain to submit fraudulent information requests.
The company stated only a limited number of customers were impacted, and that their systems and funds remain secure. Compromised information includes full name, date of birth, occupation, contact details, account statements, and comprehensive transaction history, including Bitcoin records.
Why it matters
This news is significant because the exposure of personal and financial information from a major fintech startup's customers increases risks of widespread fraud and identity theft. The attackers' threats to release daily new leaks escalate pressure on Revolut, highlighting challenges in cybersecurity and the urgent need for improved protection of customer data.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗