Revolut Extortionists Leak Customer Data Amid Cryptocurrency Transaction Histories

Revolut, a British fintech company, is facing an extortion campaign after attackers began publishing sensitive customer information obtained through a fraudulent data request. The exposed records reportedly include Bitcoin transaction histories, with the bad actors demanding payment from Revolut to pause the leaks.

The company confirmed that it handed over sensitive customer information to an authorized third party, who used a legitimate agency email domain to request customers' information. While the exact nature of the leaks is unclear, several reports claim the data included customers' birth dates, phone numbers, email addresses, passports, driver's licenses, and transaction histories.

Revolut stated that the data leak only affected a handful of customers, who have been notified by the company. The fintech firm clarified that customer funds and its internal system are unaffected by the leaks, adding that it had reported the issue to law enforcement agencies.