Revolut Data Breach: Attackers Demand 10,000 BTC Ransom

Revolut recently confirmed that unauthorized parties accessed sensitive customer records after successfully posing as a government agency via email. The attackers managed to bypass security checks by using a legitimate government domain to request data. While the company stated that internal systems and customer funds remain safe, the breach exposed personal information including passports, verification selfies, and transaction histories.

Following the theft, the attackers issued a demand for 10,000 BTC, threatening to publish private data belonging to high profile clients. The exposed records reportedly include home addresses, birth dates, and banking information. Crypto investigator ZachXBT noted that the stolen data also contains specific Bitcoin withdrawal records and IBAN details, raising concerns about the potential targeting of wealthy crypto holders.

Revolut has since blocked the malicious email address and notified law enforcement and financial regulators. The company is contacting affected users directly to provide support. This incident serves as a stark reminder of the risks involved when financial institutions hold both personal identification documents and detailed cryptocurrency transaction histories in one place.

For now, users should remain vigilant against phishing attempts or suspicious contact. The situation highlights a growing debate over how firms verify information requests from government entities. As investigators continue to track the movement of the leaked information, privacy advocates are calling for more secure, decentralized ways to handle identity verification.