Revolut Data Breach: Hackers Leak Customer Documents, Demand Ransom Payment

TLDR

• Cybercriminals have released personal identification documents and verification selfies belonging to Revolut users
• Extortionists are demanding ransom payment while promising to escalate data releases daily
• The security incident resulted from a fraudulent email impersonating a government authority to submit fake data requests
• Compromised information contains personal details, financial transaction logs, and cryptocurrency activity records
• Revolut maintains that core infrastructure and client funds have not been compromised

Revolut is grappling with a significant security incident as cybercriminals have started publishing confidential customer data on the internet while issuing daily leak threats unless their ransom demands are satisfied.

The perpetrators made their intentions clear through a Telegram message, stating: “We’re going to start releasing more and more data everyday until revolut pays for leaking their customers.”

The initial data dump included identification credentials and personal photographs connected to professional tennis player Alexander Shevchenko and Felix Römer, who serves as chief executive of cryptocurrency gaming platform Gamdom, as revealed in a social media update from International Cyber Digest.

The stolen material encompasses complete names, birth dates, professional information, communication details, banking statements, and comprehensive payment histories, with cryptocurrency transaction records among the leaked materials.

Government-issued passports and driving licenses were also included in the breached dataset, as documented by TechCrunch in their coverage.

Origins of the Security Incident

According to Revolut’s official statement, the data exposure stemmed from a “sophisticated external impersonation scam.” A malicious actor utilized an email account from an authentic government institution domain to file illegitimate information access requests.

The financial technology firm stated it identified the unauthorized activity, promptly blocked the compromised email address, and informed the appropriate government department, law enforcement bodies, privacy watchdogs, and banking supervisors.

Revolut acknowledged the breach impacted a “very limited” customer base, with all affected individuals receiving direct communication.

The precise count of impacted users has not been made public by the organization.

Potential Dangers for Compromised Users

Cybersecurity professionals warn that leaked identification paperwork and biometric verification photographs significantly increase identity fraud risks for those whose information was exposed.

Users whose cryptocurrency transaction records were published may also encounter heightened privacy vulnerabilities.

Revolut emphasized that its technical infrastructure and customer financial assets remained secure and untouched.

The organization functions exclusively through digital channels without traditional banking locations and stands among Europe’s premier financial technology success stories.

Revolut is presently preparing for a possible stock market debut with ambitions of achieving a valuation approaching $200 billion.

The security breach’s timing presents challenges for the firm as it advances toward this significant corporate objective.

Revolut has not issued any public statement regarding potential compliance with the attackers’ extortion demands or outlined additional protective measures to stop subsequent data releases.

The crisis continues to unfold, with perpetrators maintaining their promise of ongoing daily information dumps until their financial requirements are satisfied.

The post Revolut Data Breach: Hackers Leak Customer Documents, Demand Ransom Payment appeared first on Blockonomi.