Revolut Attackers Demand Ransom for Daily Data Leaks

Threat actors have started leaking identity documents and facial-verification images belonging to Revolut customers. The group is demanding payment to halt the daily release of new data. This marks a significant escalation in the breach that exposed personal and financial records.

Cointelegraph reported that the leaked files include sensitive personal information. The data contains full names, dates of birth, and contact details. It also covers occupation, account statements, and complete transaction histories, including Bitcoin records.

Attackers target high-profile individuals

The initial leaks include identity documents from specific high-profile users. Tennis player Alexander Shevchenko is among those affected. Felix Römer, the CEO of Gamdom, also had his data exposed.

The attackers posted a threat on a messaging platform. They stated they would continue releasing data daily until Revolut pays. The group explicitly linked the continued leaks to the company's inaction.

Impersonation scam enabled the breach

Revolut identified the cause as a sophisticated external impersonation scam. Attackers used an email address from a legitimate government agency domain. This allowed them to submit fraudulent requests for customer information.

The company notified customers on Friday about the specific data types involved. They clarified that the breach affected a limited number of users. Revolut confirmed that its core systems remain secure.

Customer funds remain secure

Revolut stated that customer funds are unaffected by the incident. The breach involved the theft of data rather than direct financial loss. The company is treating the event as a data privacy issue.

Cointelegraph reached out to Revolut and Felix Römer for comment. The fintech company maintains that the integrity of its financial infrastructure is intact. The focus remains on the risk of identity theft for affected users.