Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [BUSINESS]

2 clusters · 84 sources · 3 days · First seen 2 days ago · Last updated about 10 hours ago

Revolut customer data disclosure via impersonation scam

Overview

Fintech company Revolut has confirmed a data disclosure incident resulting from a sophisticated impersonation scam. Rather than a direct breach of its technical infrastructure, unauthorized third parties used a legitimate government agency email domain with valid authentication credentials to submit fraudulent requests for customer information. This method allowed the requests to bypass automated security checks.

The disclosed sensitive data includes full names, dates of birth, postal and email addresses, phone numbers, IBANs, and account statements. In several instances, the breach also involved copies of identity documents such as passports, driver’s licenses, and verification selfies. Transaction histories, including Bitcoin activity, were also exposed.

While Revolut maintains that its core technical systems and customer funds remain secure, new reports indicate the incident may have specifically targeted high-net-worth individuals. On-chain investigator ZachXBT suggested the attackers may be seeking a ransom, and there are reports that hackers have begun sharing some of the stolen data on Telegram.

Recent developments indicate the scale of the extortion attempt, with one report suggesting attackers have demanded 10,000 Bitcoin, valued at approximately $780 million. To prove the breach, hackers have reportedly shared the data of high-profile individuals, including tennis player Alexander Shevchenko and Gamdom CEO Felix Römer.

A group identifying as ‘Revolut Smilik’ has reportedly claimed responsibility for the incident on Telegram, demanding the ransom to halt further leaks. Revolut has blocked the fraudulent email source and has notified law enforcement, financial regulators, the relevant government agency, and the impacted individuals. Experts continue to warn that the stolen information could facilitate highly targeted phishing and identity theft attempts.

Entities

Revolut · ZachXBT · Alexander Shevchenko · Felix Römer · CoinDesk

Claims

What the coverage asserts, and how many sources carry each claim.

[● 8 SOURCES] Exposed data reportedly includes identity documents, selfies, and Bitcoin transaction histories. www.tronweekly.com · bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · +3 more
[● 7 SOURCES] A limited number of customers were affected and have been notified. bitcoinethereumnews.com · blockchainreporter.net · entrevue.fr · finbold.com · therecord.media · +2 more
[● 7 SOURCES] Revolut confirmed it was the victim of a sophisticated impersonation scam involving fraudulent requests from a legitimate government agency email domain. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · entrevue.fr · www.presse-citron.net · +2 more
[● 6 SOURCES] Customer funds and internal systems remain unaffected by the incident. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · www.presse-citron.net · bilbaohiria.com · +1 more
[● 5 SOURCES] Hackers have demanded a ransom from Revolut to stop the release of customer data. www.tronweekly.com · bitcoinethereumnews.com · finbold.com · www.frandroid.com · bilbaohiria.com
[● 5 SOURCES] The breach involved a social engineering attack rather than a technical system exploit. blockchainreporter.net · www.phonandroid.com · bilbaohiria.com · bitcoinethereumnews.com · wwwhatsnew.com
[● 5 SOURCES] Revolut has notified law enforcement, financial regulators, and data protection authorities regarding the incident. bitcoinethereumnews.com · blockchainreporter.net · www.itpro.com · targovishtenews.net · therecord.media
[● 2 SOURCES] The demanded ransom is reported to be 10,000 Bitcoin, valued at approximately $780 million. finbold.com · bilbaohiria.com

Timeline

about 10 hours ago

[TECHNOLOGY] 18 sources
Revolut confirms data exposure via government impersonation scam
Revolut confirmed a data breach caused by a sophisticated impersonation scam using a legitimate government email domain. Sensitive customer identity and Bitcoin transaction data were exposed.
2 days ago

[BUSINESS] 67 sources
Revolut discloses customer data following fraudulent government email requests
Revolut confirmed a data disclosure after a sophisticated impersonation scam used a legitimate government email domain to request and obtain sensitive customer identity and financial records.

Sources

24matins.es · 24matins.fr · 24sata.hr · ambcrypto.com · bilbaohiria.com · bitcoinbazis.hu · bitcoinethereumnews.com · bitcoinsistemi.com · blockchainreporter.net · blocktempo.com · blockzeit.com · blogspan.net · bmmagazine.co.uk · brandsit.pl · cahighways.org · channelpro.co.uk · chiccheinformatiche.com · coincu.com · coindoo.com · crypto.news · cryptoast.fr · cryptobriefing.com · cryptoninjas.net · cyberinsider.com · cybernoz.com · dailydigest.ie · de.rt.com · denik.cz · detlionblood32.wordpress.com · divany.hu · dorzeczy.pl · emarketerz.fr · en.bitcoinsistemi.com · enerzine.com · entrevue.fr · epitesti.ro · espiganoticias.net · euroweeklynews.com · financiarul.ro · finbold.com · forbes.ro · frandroid.com · generation-nt.com · gospodarka.gazeta.pl · ibtimes.co.uk · ictjournal.ch · index.hr · infokuryr.cz

This summary has been updated 3 times: see revision history