Revolut is reportedly facing a 10,000 $BTC ransom demand following the customer data breach.
The attackers allegedly tricked Revolut into handing over sensitive customer information by using a fraudulent request from an unauthorized account operating inside a legitimate government agency’s domain.
Revolut has confirmed that customer data was exposed, including information that may include identity documents, account details and full transaction histories, including Bitcoin activity.
Now, the threat actors are reportedly demanding 10,000 BTC and threatening to publish more customer data every day if Revolut doesn't pay.
I’ve also seen a Telegram screenshot showing the alleged hackers threatening to “release more data everyday until revolution pays for leaking their customers”, but I’d treat that specific ransom figure as an unverified attacker claim until Revolut, law enforcement or a credible independent investigation confirms it.
What makes this incident especially serious isn't just the data leak.
Linking someone's identity documents, financial information and Bitcoin transaction history creates a much more dangerous package for targeted phishing, social engineering and other attacks.
And if the attackers really are threatening daily releases, this could get much worse… fingers crossed.
The attackers allegedly tricked Revolut into handing over sensitive customer information by using a fraudulent request from an unauthorized account operating inside a legitimate government agency’s domain.
Revolut has confirmed that customer data was exposed, including information that may include identity documents, account details and full transaction histories, including Bitcoin activity.
Now, the threat actors are reportedly demanding 10,000 BTC and threatening to publish more customer data every day if Revolut doesn't pay.
I’ve also seen a Telegram screenshot showing the alleged hackers threatening to “release more data everyday until revolution pays for leaking their customers”, but I’d treat that specific ransom figure as an unverified attacker claim until Revolut, law enforcement or a credible independent investigation confirms it.
What makes this incident especially serious isn't just the data leak.
Linking someone's identity documents, financial information and Bitcoin transaction history creates a much more dangerous package for targeted phishing, social engineering and other attacks.
And if the attackers really are threatening daily releases, this could get much worse… fingers crossed.
