Attackers begin posting Revolut customer records, threaten daily leaks unless paid

Attackers behind the Revolut customer data breach have started publishing sensitive user records online and say they will continue releasing more material each day unless the fintech pays. According to Cointelegraph, the newly exposed data reportedly includes selfies and identity documents tied to tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom. The report cites a Sunday X post from International Cyber Digest and a Telegram message attributed to the attackers saying they would release more data every day until Revolut pays. Revolut told customers on Friday that the leaked information includes full names, dates of birth, occupations, contact details, account statements and full transaction histories, including Bitcoin transaction records. The company said the breach stemmed from a "sophisticated external impersonation scam," in which an attacker used an email address from a legitimate government agency domain to submit fraudulent information requests. Revolut added that only a limited number of customers were affected and said its systems and customer funds were not impacted. Römer told Cointelegraph the leaked details appeared to have come from Revolut, and confirmed he was among the customers contacted by the company on Friday.