Revolut attackers reportedly start leaking customer data and threaten daily releases
Attackers reportedly start releasing Revolut customer files
People who obtained sensitive Revolut customer information appear to have begun posting it online. The attackers have reportedly threatened to release more data every day until Revolut pays.
The leaked files reportedly include selfies and copies of identity documents belonging to tennis player Alexander Shevchenko and Felix Römer, the CEO of online crypto casino Gamdom. That information was shared in an X post by International Cyber Digest on Sunday.
Key details so far
- The attackers reportedly said on Telegram: "We're going to start releasing more and more data everyday until revolut pays for leaking their customers."
- Revolut told customers that the exposed data includes full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions.
What Revolut says
Revolut told Cointelegraph on Saturday that the data was exposed through a "sophisticated external impersonation scam." The attacker used an email address from a legitimate government agency domain to submit fraudulent requests for information.
Revolut said a "limited number" of customers were affected and that its systems and customer funds are unaffected.
What is still unclear
The attackers' claim that they have started publishing data and will release more every day is not a confirmed fact. The reported publication of selfies and identity documents has not been independently verified.
According to the report, Revolut and Römer were contacted for comment.
Why the leak matters
Exposed identity documents and facial-verification images could increase the risk of identity theft, according to the report.