Revolut Faces Data Leak Threat as Attackers Demand Ransom in Bitcoin

Revolut, a UK-based online bank, is grappling with a significant data breach as attackers have begun leaking sensitive customer information. The threat actors are demanding a ransom of 10,000 BTC, approximately $780 million, to halt further releases of data, which includes personal details of prominent clients.

The attackers initially contacted Revolut with demands for payment before starting to share sensitive information, including names, addresses, and copies of identification documents, on social media platforms. They have accused Revolut of negligence regarding privacy protections and claim that the company has shared sensitive information with countries outside its jurisdiction.

Revolut has confirmed that it identified a sophisticated external impersonation scam, where the attackers posed as a legitimate government agency to gain access to customer data. The company stated that the number of affected customers is “very limited” but did not provide specific figures. They assured that customer funds remain safe and have alerted the relevant authorities.

High-profile individuals, including former Mt. Gox CEO Mark Karpelès, have reportedly been affected by the breach. The attackers are threatening to release more operational insights and internal data unless their ransom demand is met.