Revolut attackers threaten daily customer data leaks
Attackers who claim to have obtained sensitive Revolut customer information have begun publishing identity documents and facial-verification images online and say they will post more data each day until the fintech pays. Posted material reportedly includes selfies and ID documents tied to public figures such as tennis player Alexander Shevchenko and Gamdom CEO Felix Römer.
Why It Matters
The leaked files reportedly contain personally identifiable information and full transaction histories, which raises the risk of identity theft and financial exposure for affected customers. Revolut attributes the incident to a targeted impersonation scam that exploited a legitimate government-domain email to request customer records.
Key Facts
- Reported tactic used by attackers: Threat actors said they would publish more data daily until "revolut pays" (reported on Telegram).
- Examples of published files: Selfies and copies of identity documents reportedly belonging to Alexander Shevchenko and Felix Römer (per International Cyber Digest X post).
- Types of customer data exposed: Full name, date of birth, occupation, contact information, account statements and full transaction history including Bitcoin transactions, plus ID and facial-verification images (per Revolut).
- Revolut's explanation: Leaked data resulted from a "sophisticated external impersonation scam" using an email address from a legitimate government agency domain to submit fraudulent information requests.
- Scope and impact per Revolut: Revolut said a "limited number" of customers were affected and its systems and customer funds were not impacted.
Attackers who claim to hold sensitive Revolut customer records have started posting material online and warned they will keep releasing more data each day until the company pays, according to social-media posts and reporting. The initially shared files reportedly include identity documents and facial-verification selfies tied to named individuals, drawing attention to the breach's potential severity.
International Cyber Digest flagged that the leaked items include images and IDs linked to tennis player Alexander Shevchenko and Felix Römer, the CEO of online crypto casino Gamdom. The presence of identity documents and facial-verification photos increases the possibility of identity fraud for those affected, security experts often warn.
Revolut has told customers and press outlets that the incident stemmed from what it described as a "sophisticated external impersonation scam." According to the company, the attacker used an email address associated with a legitimate government agency domain to submit fraudulent requests for customer information. Revolut later said the breach affected a "limited number" of customers and that its own systems and customer funds remain unaffected.
The firm also provided a summary of the types of data exposed, saying the leak encompassed customers' names, dates of birth, occupations, contact details, account statements and full transaction histories, including records of Bitcoin transactions, in addition to identity documents and verification images. Cointelegraph reported that it reached out to Revolut and to Felix Römer for comment. The attackers' stated plan to release additional data daily until payment continues to drive public concern and scrutiny over how the information was obtained.
Keep Reading
Trump dismisses calls for AI slowdown from leading tech CEOs
Could AI really kill us within a decade?
What’s behind the AI industry’s latest warnings of doom?
