{
  "version": 1,
  "event_id": "evt_d5f4ec8b51711725",
  "url": "https://xiyu.news/events/evt_d5f4ec8b51711725/",
  "json": "https://xiyu.news/api/events/evt_d5f4ec8b51711725.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Revolut 客户数据泄露：攻击者索要 1 万枚 BTC 赎金",
    "en": "What we know about the Revolut customer data leak"
  },
  "current_state": {
    "zh": "英国金融科技公司 Revolut 确认，攻击者利用一个真实的政府机构域名邮箱提交欺诈性信息调取请求，从而骗取了客户数据；攻击者随后开始公开泄露身份证件，并据称索要 1 万枚 BTC（约 7.8 亿美元）以停止继续泄露。Revolut 尚未确认这一赎金要求，也未证实网上流传材料的真实性。\n\n据称 1 万枚 BTC 的赎金要求是金融科技领域迄今与加密货币挂钩的最大金额之一，也说明一个简单的邮箱冒充手法就能绕过同时托管法币与加密资产的银行的安全校验。对加密行业而言，知名持币者（包括前 Mt. Gox 首席执行官 Mark Karpelès）的交易记录可能被泄露，引发了对高净值链上用户遭定向攻击的担忧。\n\n可能泄露的数据包括姓名、出生日期、住址、电子邮箱和电话号码，以及护照与驾照复印件；客户通知还提到账户对账单、IBAN、提现记录和包含 BTC 交易的完整交易历史。Revolut 表示受影响客户数量“非常有限”，其系统与客户资金未受影响；而 1 万枚 BTC 的赎金数字尚未得到证实，包括分析师 Max Karpis 在内的一些观察者怀疑该要求并非真实，因为在链上支付很容易被追踪。",
    "en": "Attackers tricked Revolut into disclosing customer data and are allegedly leaking stolen details while demanding over 10,000 BTC (~$780M) in ransom, though Revolut has not confirmed the demand and some analysts doubt its legitimacy."
  },
  "first_seen_at": "2026-09-14T18:08:05.056002+00:00",
  "last_updated_at": "2026-09-14T18:08:05.056002+00:00",
  "last_material_change_at": "2026-09-14T18:08:05.056002+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "data-leak",
    "revolut",
    "what"
  ],
  "identifiers": [],
  "topics": [
    "data-leak",
    "fintech",
    "ransomware",
    "revolut",
    "security-breach"
  ],
  "updates": [
    {
      "update_id": "upd_b40fc45bcecd7224",
      "event_id": "evt_d5f4ec8b51711725",
      "occurred_at": "2026-09-14T13:10:30Z",
      "published_at": "2026-09-14T13:10:30Z",
      "first_seen_at": "2026-09-14T18:08:05.056002Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Revolut 客户数据泄露：攻击者索要 1 万枚 BTC 赎金",
      "title_en": "What we know about the Revolut customer data leak",
      "what_changed_zh": "英国金融科技公司 Revolut 确认，攻击者利用一个真实的政府机构域名邮箱提交欺诈性信息调取请求，从而骗取了客户数据；攻击者随后开始公开泄露身份证件，并据称索要 1 万枚 BTC（约 7.8 亿美元）以停止继续泄露。Revolut 尚未确认这一赎金要求，也未证实网上流传材料的真实性。\n\n据称 1 万枚 BTC 的赎金要求是金融科技领域迄今与加密货币挂钩的最大金额之一，也说明一个简单的邮箱冒充手法就能绕过同时托管法币与加密资产的银行的安全校验。对加密行业而言，知名持币者（包括前 Mt. Gox 首席执行官 Mark Karpelès）的交易记录可能被泄露，引发了对高净值链上用户遭定向攻击的担忧。\n\n可能泄露的数据包括姓名、出生日期、住址、电子邮箱和电话号码，以及护照与驾照复印件；客户通知还提到账户对账单、IBAN、提现记录和包含 BTC 交易的完整交易历史。Revolut 表示受影响客户数量“非常有限”，其系统与客户资金未受影响；而 1 万枚 BTC 的赎金数字尚未得到证实，包括分析师 Max Karpis 在内的一些观察者怀疑该要求并非真实，因为在链上支付很容易被追踪。",
      "what_changed_en": "Attackers tricked Revolut into disclosing customer data and are allegedly leaking stolen details while demanding over 10,000 BTC (~$780M) in ransom, though Revolut has not confirmed the demand and some analysts doubt its legitimacy.",
      "current_state_zh": "英国金融科技公司 Revolut 确认，攻击者利用一个真实的政府机构域名邮箱提交欺诈性信息调取请求，从而骗取了客户数据；攻击者随后开始公开泄露身份证件，并据称索要 1 万枚 BTC（约 7.8 亿美元）以停止继续泄露。Revolut 尚未确认这一赎金要求，也未证实网上流传材料的真实性。\n\n据称 1 万枚 BTC 的赎金要求是金融科技领域迄今与加密货币挂钩的最大金额之一，也说明一个简单的邮箱冒充手法就能绕过同时托管法币与加密资产的银行的安全校验。对加密行业而言，知名持币者（包括前 Mt. Gox 首席执行官 Mark Karpelès）的交易记录可能被泄露，引发了对高净值链上用户遭定向攻击的担忧。\n\n可能泄露的数据包括姓名、出生日期、住址、电子邮箱和电话号码，以及护照与驾照复印件；客户通知还提到账户对账单、IBAN、提现记录和包含 BTC 交易的完整交易历史。Revolut 表示受影响客户数量“非常有限”，其系统与客户资金未受影响；而 1 万枚 BTC 的赎金数字尚未得到证实，包括分析师 Max Karpis 在内的一些观察者怀疑该要求并非真实，因为在链上支付很容易被追踪。",
      "current_state_en": "Attackers tricked Revolut into disclosing customer data and are allegedly leaking stolen details while demanding over 10,000 BTC (~$780M) in ransom, though Revolut has not confirmed the demand and some analysts doubt its legitimacy.",
      "detailed_summary_zh": "Attackers tricked Revolut into disclosing customer data and are allegedly leaking stolen details while demanding over 10,000 BTC (~$780M) in ransom, though Revolut has not confirmed the demand and some analysts doubt its legitimacy.",
      "detailed_summary_en": "Attackers tricked Revolut into disclosing customer data and are allegedly leaking stolen details while demanding over 10,000 BTC (~$780M) in ransom, though Revolut has not confirmed the demand and some analysts doubt its legitimacy.",
      "background_zh": "Revolut 是一家总部位于英国的金融科技公司，为数千万客户提供类银行服务，其中包括加密货币交易；该公司在 2022 年 9 月曾发生一次数据泄露，约 50,150 名客户的信息被曝光。伪造真实政府域名是一种已知的邮件手法，原因在于这类地址往往被安全邮件网关默认为可信来源。以比特币支付的赎金会记录在公开区块链上，因此调查人员可借助链上分析工具追踪资金流向，尽管攻击者身份并不会因此直接暴露。",
      "background_en": "Revolut is a UK-based fintech that offers banking-like services, including crypto trading, to tens of millions of customers, and it suffered an earlier breach in September 2022 that exposed data on roughly 50,150 customers. Spoofing legitimate government domains is a well-known email technique precisely because such addresses are often trusted by secure email gateways. Ransom payments made in bitcoin are recorded on a public blockchain, so investigators using chain-analysis tools can follow the funds even though the attacker's identity is not directly revealed.",
      "community_discussion_zh": "社交媒体上的反应以质疑为主，Revolut 投资人兼加密分析师 Max Karpis 认为，1 万枚 BTC 的付款很容易被追踪，攻击者因此极难变现。链上调查员 ZachXBT 认为攻击者可能有意针对少数富裕的 Revolut 客户；受影响的客户 Felix Römer 也证实，自己的信息出现在已公布的泄露数据中。",
      "community_discussion_en": "Social media reaction has been largely skeptical, with Revolut investor and crypto analyst Max Karpis arguing that a 10,000 BTC payment would be easily traced and therefore extremely difficult for the attackers to cash out. On-chain investigator ZachXBT suggested the attackers may have deliberately targeted a small number of wealthy Revolut customers, and one affected customer, Felix Römer, confirmed that his details appeared in the published leak.",
      "market_impact_zh": "这一事件对市场的传导渠道主要是情绪与安全风险，而非流动性：若真支付 1 万枚 BTC，将是一笔极其显眼的链上转账，相关钱包会受到区块链分析机构的密集审视，但目前尚无支付被确认。此外，持币客户的交易记录与身份文件可能被泄露，增加了针对 BTC 等资产持有者的定向钓鱼与勒索风险，这属于用户安全层面的问题，而非直接的供给或价格驱动因素。",
      "market_impact_en": "The market channel here is mainly sentiment and security risk rather than liquidity: a payment of 10,000 BTC would be a highly visible on-chain transfer and would draw intense blockchain-analytics scrutiny of any wallet involved, though no payment has been confirmed. Separately, the possible exposure of transaction histories and identity documents of crypto-holding customers raises the risk of targeted phishing and extortion against holders of BTC and other assets, which is a user-security issue rather than a direct supply or price driver.",
      "importance_score": 7.5,
      "references": [
        {
          "url": "https://techcrunch.com/2026/09/12/revolut-confirms-customer-data-breach-through-fake-government-requests/",
          "title": "Revolut confirms customer data breach through fake... | TechCrunch"
        },
        {
          "url": "https://thecybersecguru.com/news/revolut-data-breach-2026/",
          "title": "Revolut Data Breach 2026: Passports, Selfies... | The CyberSec Guru"
        },
        {
          "url": "https://www.chainalysis.com/glossary/crypto-ransomware/",
          "title": "What Is Crypto Ransomware? Definition, Types, RaaS & Tracing"
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "rss:protos.com_feed_:a4af7506ff1c0de4"
      ],
      "sources": [
        {
          "url": "https://protos.com/what-we-know-about-the-revolut-customer-data-leak/",
          "label": "Protos",
          "source_type": "rss",
          "official": false
        }
      ]
    }
  ]
}