Revolut Data Breach Exposed Data of About 680 Customers After Fake Government Requests
Summary
Revolut says it received no direct ransom demand. Reports say hackers used fake government requests for months to obtain personal and financial data from about 680 customers; separate claims about stolen Italian police data remain under investigation.
Key points
- Revolut notified potentially affected users that personal, passport, contact, and financial information was compromised.
- Reports say the attackers impersonated a government agency and submitted fraudulent requests to Revolut Bank UAB for roughly five months.
- The reported campaign began after a government employee’s accounts were compromised through an infostealer infection.
- SecurityWeek reports approximately 680 Revolut customers were affected; the company did not disclose the number of impacted individuals when contacted.
- A threat actor using the name IAmNotAVillain publicly demanded $3 million and threatened to sell the information, but Revolut said it received no direct contact or demand.
- The actor separately claimed theft of more than 147GB of Italian law-enforcement data; Italian police are investigating.
Article Details
- Victim Organization
- Revolut
- Incident Type
- Data breach through fraudulent government requests sent using a compromised government employee email account.
- Data Types Exposed
- Personal information
- Passport information
- Email addresses
- Phone numbers
- Financial information
- Affected Records
- Approximately 680 Revolut customers, according to SecurityWeek; the company did not disclose the number of affected individuals.
- Ransom Or Extortion
- A threat actor publicly demanded $3 million and threatened to sell the allegedly obtained customer information. Revolut said it had received no direct contact or demand. The actor also claimed that a former associate held a sample of the information.
- Claim Status
- alleged
Threat Actors
Countries
ItalyIn separate communications, the hackers claimed that their campaign lasted for six months and that it also involved the theft of over 147GB of data from a law enforcement agency in Italy.Lithuaniaand started using the email account to send fraudulent government requests to Revolut Bank UAB, the Lithuania-based subsidiary of the British firm.