Revolut attackers threaten daily customer data leaks

Update (Sept. 14 at 09:55 UTC): This article has been updated to include a comment from Felix Römer, one of Revolut’s customers, whose details appear in the leak.

Threat actors who obtained sensitive Revolut customer information appear to have begun posting the information online and are threatening to release more data every day until “revolut pays.”

The newly leaked information reportedly includes selfies and copies of identity documents belonging to tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom, according to an X post from International Cyber Digest on Sunday. 

“We’re going to start releasing more and more data everyday until revolut pays for leaking their customers,” the attackers reportedly said on Telegram.

The exposed identity documents and facial-verification images could increase the risk of identity theft. Revolut on Friday told customers the leaked data also includes customers’ full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions. 

Related: Revolut says customer data exposed through fake government email

Römer told Cointelegraph that, based on the details the attackers have, the data appeared to have come from Revolut. He also confirmed he was one of the customers contacted by Revolut on Friday.

Revolut did not provide further comment beyond its statement to Cointelegraph on Saturday, when it said customer data was leaked due to a “sophisticated external impersonation scam” in which the attacker used an email address from a legitimate government agency domain email to submit fraudulent requests for information. 

Revolut also said the breach affected a “⁠limited number” of customers, and its systems and customer funds are unaffected. 

Magazine: Crypto’s biggest week ever? Swarm fears prompt AI slowdown: Hodler’s Digest