Revolut confirms data exposure via government impersonation scam

Revolut data breach impersonation scam social engineering fintech security

Fintech company Revolut has confirmed a security incident involving the exposure of sensitive customer data. The breach was not a technical system hack but a sophisticated social engineering attack. Attackers used a legitimate government agency email domain to submit fraudulent requests for information, which Revolut processed as authentic.

The exposed data reportedly includes full names, dates of birth, contact details, and identity documents such as passports and driver’s licenses, as well as verification selfies. Financial information, including IBANs, account statements, and Bitcoin transaction histories, was also compromised. Some reports suggest the attack specifically targeted high-net-worth individuals.

A group identifying as Revolut Smilik has reportedly claimed responsibility on Telegram, demanding a ransom of 10,000 Bitcoin, valued at approximately $780 million, to halt further data leaks. Revolut stated that its internal systems and customer funds remain unaffected. The company has notified law enforcement, financial regulators, and data protection authorities.

Entities

Alexander Shevchenko · Felix Römer · Gamdom · Revolut · ZachXBT

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] Hackers are demanding a ransom to prevent further leaks of customer and internal company data. www.tronweekly.com · bitcoinethereumnews.com · finbold.com · www.frandroid.com
[● 6 SOURCES] Customer funds and internal systems remain unaffected by the incident. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · www.presse-citron.net · bilbaohiria.com · +1 more
[● 6 SOURCES] Revolut was targeted by a sophisticated impersonation scam using a legitimate government agency email domain. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · www.presse-citron.net · +1 more
[● 7 SOURCES] A limited number of customers were affected and have been notified. bitcoinethereumnews.com · blockchainreporter.net · entrevue.fr · finbold.com · therecord.media · +2 more
[● 8 SOURCES] Exposed data reportedly includes identity documents, selfies, and Bitcoin transaction histories. www.tronweekly.com · bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · +3 more
[● 2 SOURCES] The demanded ransom is reported to be 10,000 Bitcoin, valued at approximately $780 million. finbold.com · bilbaohiria.com
[● 5 SOURCES] Hackers have demanded a ransom from Revolut to stop the release of customer data. www.tronweekly.com · bitcoinethereumnews.com · finbold.com · www.frandroid.com · bilbaohiria.com
[● 5 SOURCES] The data breach affected a limited number of customers. bitcoinethereumnews.com · blockchainreporter.net · entrevue.fr · finbold.com · therecord.media
[○ 1 SOURCE] The attackers allegedly demanded a ransom of 10,000 Bitcoin. finbold.com
[● 6 SOURCES] Exposed data reportedly includes identity documents, selfies, contact details, and Bitcoin transaction histories. www.tronweekly.com · bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · +1 more
[● 5 SOURCES] The breach involved a social engineering attack rather than a technical system exploit. blockchainreporter.net · www.phonandroid.com · bilbaohiria.com · bitcoinethereumnews.com · wwwhatsnew.com
[● 7 SOURCES] Revolut confirmed it was the victim of a sophisticated impersonation scam involving fraudulent requests from a legitimate government agency email domain. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · www.presse-citron.net · +2 more