REVOLUT has disclosed a security incident in which an unauthorised third party obtained sensitive customer information by sending fraudulent requests from the email domain of a legitimate government agency. The company has not publicly detailed the technical method beyond the use of these impersonated requests.
People claiming responsibility have shared samples of the allegedly stolen data in several Telegram groups. The material appears to include information linked to prominent individuals, including business leaders, sports professionals and performing artists. These claims and the authenticity and full scope of the posted data were not independently confirmed in the supplied report.
The attackers have threatened to release more information “every day” unless Revolut pays a ransom of 10,000 Bitcoin, which the report said was worth more than $782 million at the time. The supplied article does not state whether Revolut intends to pay, how many customers may be affected, or what remedial measures the company has taken.