Pavlo Kot

Hackers leak Revolut customer data and demand ransom

Hackers leak Revolut customer data and demand ransom
Hackers demand ransom over leaked Revolut customer data

​Hackers who obtained access to Revolut customer data have begun publishing users' documents and photos and threatened to release new information every day. The attackers say they will continue exposing the data until the fintech company pays them.

The leaked materials include selfies and copies of identity documents belonging to Revolut customers. According to International Cyber Digest, some of the information is being distributed through Telegram.

Among those affected are tennis player Alexander Shevchenko and Gamdom CEO Felix Römer. Revolut previously said the incident affected a limited number of customers and did not compromise customer funds or the company's internal systems.

Hackers threaten daily data leaks

The attackers said they would release more data every day until Revolut pays. The size of the ransom demand and the specific terms of any potential deal have not been disclosed.

The published materials include identity documents and images used for facial verification. Their release could increase the risk of identity theft and other forms of fraud targeting affected customers.

Revolut previously told customers that the compromised information also includes full names, dates of birth, occupations, contact details and bank statements. The attackers also obtained the complete transaction histories of some customers, including records of Bitcoin transactions.

Revolut blames leak on fake government request

The incident did not result from a breach of Revolut's internal systems. According to the company, the attacker carried out a sophisticated impersonation scheme, posing as a government official and submitting fraudulent requests for information.

The attacker used an email address from the domain of a legitimate government agency, allowing the request to pass verification. Revolut later discovered the fraud and said its systems and customer funds had not been compromised.

Personal data security has previously become an issue for other companies in the crypto industry. Hardware wallet maker Ledger is facing a class action seeking at least $500 million over a series of customer data breaches.

The plaintiff claims Ledger failed to adequately protect customers' personal information and did not take sufficient measures following previous incidents. The allegations once again highlight the risks that can arise even when users' crypto assets themselves remain secure.

Earlier, we reported that hackers stole more than $100 million in Bitcoin after compromising Coldcard wallets. The incident highlighted the risks of attacks on crypto storage infrastructure even when hardware solutions are used.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.