Revolut Hackers Publish Client Data and Demand 10,000 Bitcoin Ransom

Attackers who exploited a fake government request to access Revolut customer records have made their first move. Attackers who tricked Revolut into handing over customer records published the data of high-profile clients over the weekend and demanded a ransom of 10,000 Bitcoin, warning on September 14 that they would leak more each day until the European fintech pays. Revolut confirmed on September 12 that an unauthorized party had impersonated a government agency, sending fraudulent requests for information from an email on the agency’s real domain with valid technical authentication, which staff processed as a routine legal request. Revolut Blocks Address and Alerts Regulators As CryptoPotato covered, the data breach included the disclosure of passports, verification selfies, account statements and IBANs, alongside names, dates of birth and home addresses. A Revolut spokesperson said the company “recently identified a sophisticated external impersonation scam where an unauthorized third party utilized a legitimate government agency domain email to submit fraudulent requests for information.” The group calling itself Revolut Smilik posted client files across several Telegram chann...