Revolut facing ransom request after hackers obtain customers’ data

Revolut, the digital banking company, is facing a ransom demand from hackers who have obtained customer data. The breach, which occurred over the weekend, leaked the personal information of a "very limited" number of users. This data included identity documents, postal and email addresses, facial verification images, and phone numbers. Affected customers were notified via email, confirming that their account statements, withdrawal records, and transaction histories were also released.

The hackers, operating under the name Revolut Smilik, claimed to have exploited a sophisticated external impersonation scam. They allegedly used a legitimate government agency email to send fraudulent requests for information to Revolut. The hackers have threatened to release additional data through the messaging platform Telegram until they receive a payment from the company.

Revolut promptly blocked the compromised address and informed the relevant government agency, enforcement agencies, data protection authorities, and financial regulators. The company did not disclose the exact number of affected customers or respond to the hackers' ransom demand. Financial institutions are obligated to comply with legal requests from law enforcement or government agencies, and Revolut treated the communication as a mandatory legal demand.

Revolut, headquartered in London, has over 80 million customers worldwide and operates in 30 countries. The company has obtained licenses and approvals from regulators in the UK, France, the US, and the UAE. This year, Revolut initiated a secondary share sale with an expected valuation of $115 billion.