DataBreachesDissent
Revolut Confirms Data Breach After Government Email Impersonation
Part of the Revolut story · since 6 Sep
- Sun 6 Sep, 11:46 UTC. DataBreaches, first report. US Offers $10m Reward for Iranian Cyber Chief Behind Attacks.
- Sat 12 Sep, 21:57 UTC. Security Affairs, its first report on the story. Revolut Exposed Customer Data After Fraudulent Government Request.
- Mon 14 Sep, 09:36 UTC. SecurityOnline, its first report on the story. Revolut Exposed Customer Data After Fraudulent Government Requests.
- Mon 14 Sep, 11:57 UTC. Infosecurity, its first report on the story. Revolut Data Breach Exposes Customer IDs in Fake Agency Requests.
- Mon 14 Sep, 11:57 UTC. Malwarebytes, its first report on the story. Revolut Exposed Customer Data After Government Email Scam.
- Mon 14 Sep, 13:41 UTC. SecurityWeek, its first report on the story. Revolut Exposes Customer Data After Impersonated Agency Request.
- Tue 15 Sep, 12:00 UTC. DataBreaches. Revolut Confirms Data Breach After Government Email Impersonation. This article, 7th of 13.
- Tue 15 Sep, 12:35 UTC. DataBreaches. Revolut Reportedly Shared Biometric Data After Fake Government Request.
- Wed 16 Sep, 14:16 UTC. Security Affairs. Italian Government Email Hack Exposes Data on 680 Revolut Users.
- Thu 17 Sep, 14:11 UTC. SecurityWeek. Hackers Demand $3 Million After Fraudulent Requests Expose Revolut Data.
- Thu 17 Sep, 14:48 UTC. Malwarebytes. Revolut Customers Targeted by Phishing Days After Data Breach.
- Mon 21 Sep, 07:30 UTC. Malwarebytes. Android RatHat Malware Steals Bank Logins and Screen-Lock PINs.
- Mon 21 Sep, 09:13 UTC. Infosecurity. Revolut Breach Fuels Smishing Attacks Using Fake Identity Checks.
Revolut has disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. The company has not publicly detailed the technical method beyond the use of these impersonated requests.
People claiming responsibility have shared samples of the allegedly stolen data in several Telegram groups. The material appears to include information linked to prominent individuals, including business leaders, sports professionals and performing artists. These claims and the authenticity and full scope of the posted data were not independently confirmed in the supplied report.
The attackers have threatened to release more information “every day” unless Revolut pays a ransom of 10,000 Bitcoin, which the report said was worth more than $782 million at the time. The supplied article does not state whether Revolut intends to pay, how many customers may be affected, or what remedial measures the company has taken.
How the story developed
13 articles from 6 outlets since 6 Sep. Quiet since 21 Sep. This was the 7th report, 9 days after the first.
- Sun 6 Sep, 11:46 UTC. DataBreaches, first report. US Offers $10m Reward for Iranian Cyber Chief Behind Attacks.
- Sat 12 Sep, 21:57 UTC. Security Affairs, its first report on the story. Revolut Exposed Customer Data After Fraudulent Government Request.
- Mon 14 Sep, 09:36 UTC. SecurityOnline, its first report on the story. Revolut Exposed Customer Data After Fraudulent Government Requests.
- Mon 14 Sep, 11:57 UTC. Infosecurity, its first report on the story. Revolut Data Breach Exposes Customer IDs in Fake Agency Requests.
- Mon 14 Sep, 11:57 UTC. Malwarebytes, its first report on the story. Revolut Exposed Customer Data After Government Email Scam.
- Mon 14 Sep, 13:41 UTC. SecurityWeek, its first report on the story. Revolut Exposes Customer Data After Impersonated Agency Request.
- Tue 15 Sep, 12:00 UTC. DataBreaches. Revolut Confirms Data Breach After Government Email Impersonation. This article, 7th of 13.
- Tue 15 Sep, 12:35 UTC. DataBreaches. Revolut Reportedly Shared Biometric Data After Fake Government Request.
- Wed 16 Sep, 14:16 UTC. Security Affairs. Italian Government Email Hack Exposes Data on 680 Revolut Users.
- Thu 17 Sep, 14:11 UTC. SecurityWeek. Hackers Demand $3 Million After Fraudulent Requests Expose Revolut Data.
- Thu 17 Sep, 14:48 UTC. Malwarebytes. Revolut Customers Targeted by Phishing Days After Data Breach.
- Mon 21 Sep, 07:30 UTC. Malwarebytes. Android RatHat Malware Steals Bank Logins and Screen-Lock PINs.
- Mon 21 Sep, 09:13 UTC. Infosecurity. Revolut Breach Fuels Smishing Attacks Using Fake Identity Checks.
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 13 articles as a listHide the list
- Sun 6 SepDay 01
- US Offers $10m Reward for Iranian Cyber Chief Behind Attacks11:46 · DataBreaches · First report
Quiet for 6 days
Sat 12 SepDay 61- Revolut Exposed Customer Data After Fraudulent Government Request21:57 · Security Affairs · Picked up again
- Mon 14 SepDay 84
- Revolut Exposed Customer Data After Fraudulent Government Requests09:36 · SecurityOnline
- Revolut Data Breach Exposes Customer IDs in Fake Agency Requests11:57 · Infosecurity
- Revolut Exposed Customer Data After Government Email Scam11:57 · Malwarebytes
- Revolut Exposes Customer Data After Impersonated Agency Request13:41 · SecurityWeek
- Tue 15 SepDay 92
- Revolut Confirms Data Breach After Government Email Impersonation12:00 · DataBreaches · This article, 7th of 13
- Revolut Reportedly Shared Biometric Data After Fake Government Request12:35 · DataBreaches
- Wed 16 SepDay 101
- Italian Government Email Hack Exposes Data on 680 Revolut Users14:16 · Security Affairs
- Thu 17 SepDay 112
- Hackers Demand $3 Million After Fraudulent Requests Expose Revolut Data14:11 · SecurityWeek
- Revolut Customers Targeted by Phishing Days After Data Breach14:48 · Malwarebytes
Quiet for 4 days
Mon 21 SepDay 152- Android RatHat Malware Steals Bank Logins and Screen-Lock PINs07:30 · Malwarebytes · Picked up again
- Revolut Breach Fuels Smishing Attacks Using Fake Identity Checks09:13 · Infosecurity