Current outcome
A ransom demand has emerged in the Revolut data breach: attackers calling themselves "iamnotavillain" are demanding $3 million in Monero and threatening to sell stolen data, but no negotiations have begun and Revolut says it has had no contact or demands from the attackers; a Reuters source said about 680 customers were affected.
Progress timeline
3 material updates- #01
Bitcoin activity, passports exposed after Revolut falls for fake government request
Revolut reportedly disclosed that it was tricked by a fake government information request, exposing customers' passport data and Bitcoin transaction activity to attackers.
Source evidence: CoinDesk
- #02
Revolut Leaks Passports, Bitcoin Transaction Histories to Fake Government Request
Revolut further confirmed the incident was a sophisticated impersonation scam using a legitimate government agency domain email, and disclosed that exposed data also included passport/driver's license copies, verification selfies, contact details, IBAN/wallet reference numbers, withdrawal records and full Bitcoin transaction histories; a limited number of customers were affected, the company blocked the email address and alerted the agency, law enforcement and regulators, and said systems and customer funds were unaffected.
State after update: Revolut has confirmed it was hit by a sophisticated impersonation scam using a legitimate government agency domain email, exposing identity, verification and Bitcoin transaction data of a limited number of customers; it blocked the email address and alerted the agency, law enforcement and regulators, said systems and customer funds were unaffected, but did not disclose the number affected or the impersonated agency.
- #03
Revolut faces $3M ransom demand after data breach, report
Attackers "iamnotavillain" claimed responsibility for the Revolut data breach and demanded $3 million in Monero ransom, threatening to sell stolen customer data if unpaid; negotiations have not begun, Revolut said it has received no demands; Reuters reported about 680 customers affected.
State after update: A ransom demand has emerged in the Revolut data breach: attackers calling themselves "iamnotavillain" are demanding $3 million in Monero and threatening to sell stolen data, but no negotiations have begun and Revolut says it has had no contact or demands from the attackers; a Reuters source said about 680 customers were affected.
Source evidence: Protos