Revolut Hackers Publish Client Data and Demand 10,000 Bitcoin Ransom

Attackers who tricked Revolut into handing over customer records published the data of high-profile clients over the weekend and demanded a ransom of 10,000 Bitcoin, warning on September 14 that they would leak more each day until the European fintech pays.

Revolut confirmed on September 12 that an unauthorized party had impersonated a government agency, sending fraudulent requests for information from an email on the agency’s real domain with valid technical authentication, which staff processed as a routine legal request.

Revolut Blocks Address and Alerts Regulators As CryptoPotato covered, the data breach included the disclosure of passports, verification selfies, account statements and IBANs, alongside names, dates of birth and home addresses.

A Revolut spokesperson said the company “recently identified a sophisticated external impersonation scam where an unauthorized third party utilized a legitimate government agency domain email to submit fraudulent requests for information.” The group calling itself Revolut Smilik posted client files across several Telegram channels and warned it would “start releasing more and more data every day until Revolut pays for leaking their customers.” Hackers who attacked Revolut have published the personal data of well-known clients and demanded a ransom of 10,000 Bitcoins They posted leaked details on several customers, including tennis player Alexander Shevchenko and Gamdom CEO Felix Römer.