Revolut Data Leak Reportedly Posted Online as Attackers Threaten Daily Releases

Threat actors who obtained sensitive Revolut customer information appear to have started posting the data online and are threatening to release more information every day until “revolut pays.” The newly leaked material reportedly includes selfies and copies of identity documents belonging to tennis player Alexander Shevchenko and Gamdom CEO Felix Römer, according to an X post from International Cyber Digest on Sunday. According to Cointelegraph, the attackers said on Telegram, “We’re going to start releasing more and more data everyday until revolut pays for leaking their customers,” while Cointelegraph reached out to Revolut and Römer for comment. The exposed identity documents and facial-verification images could increase the risk of identity theft, and Revolut said on Friday that the leaked data also includes customers’ full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions. Revolut told Cointelegraph on Saturday that the customer data was leaked because of a “sophisticated external impersonation scam” in which the attacker used an email address from a legitimate government agency domain email to submit fraudulent requests for information. The company later said the breach affected a “limited number” of customers and that its systems and customer funds are unaffected. The incident comes as Revolut continues to assess the scope of the exposure, while the attackers claim they will keep publishing additional data until their demand is met.