Revolut Hackers Demand Ransom After Accessing Customer Data

The Breach and Ransom Demand

Hackers who accessed Revolut customer records by submitting fraudulent government requests have published some of that data and issued a ransom demand of $3 million in Monero, according to reporting from CoinDesk and Decrypt. The group gave Revolut a 24-hour deadline to comply, threatening to sell the customer data to third parties if payment was not received.

Targeting Crypto-Holding Customers

The attackers said they specifically targeted Revolut customers with significant cryptocurrency holdings by scanning the blockchain for accounts associated with the platform, according to Decrypt. This precision targeting narrows the scope within Revolut's broader user base but concentrates risk on those most exposed to follow-on social engineering or targeted attacks. The threat to sell customer data amplifies that exposure beyond Revolut itself.

Attack Vector

The breach exploited Revolut's customer data access systems by leveraging forged government requests, bypassing standard identity verification checks. This method circumvented conventional security layers that might have caught a direct technical intrusion, highlighting how social engineering can defeat even well-resourced fintech platforms.