Threat actors who obtained sensitive Revolut customer information appear to have begun posting the data online and are threatening to release more information daily until the fintech company pays.
High-Profile Individuals Among Leaked Data
The newly leaked information reportedly includes selfies and copies of identity documents belonging to tennis player Alexander Shevchenko and Gamdom CEO Felix Römer, according to an X post from International Cyber Digest on Sunday.
Attackers Issue Daily Release Threat
“We’re going to start releasing more and more data everyday until revolut pays for leaking their customers,” the attackers reportedly said on Telegram. Cointelegraph reached out to Revolut and Römer for comment.
Identity Theft Risks Escalate
The exposed identity documents and facial-verification images could increase the risk of identity theft. Revolut on Friday told customers the leaked data also includes customers’ full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions.
Breach Origin: Government Email Impersonation
Revolut told Cointelegraph on Saturday that the customer data was leaked due to a “sophisticated external impersonation scam” in which the attacker used an email address from a legitimate government agency domain email to submit fraudulent requests for information.
Revolut later told Cointelegraph the breach affected a “limited number” of customers, and its systems and customer funds are unaffected.
Related: Revolut says customer data exposed through fake government email