Cybercriminals demand ransom from Revolut, threaten continuous customer data dumps
Cybercriminals have released sensitive documents including ID cards and photographs of Revolut users, vowing to expose additional customer information daily unless the financial technology company meets their payment demands.
Cybercriminals responsible for accessing private Revolut user data have apparently started publishing this information on the internet and are making threats to expose additional data on a daily basis until "revolut pays."
The recently disclosed information purportedly contains photographs and identification document copies associated with professional tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom, as reported in a social media post from International Cyber Digest published on Sunday.
"We're going to start releasing more and more data everyday until revolut pays for leaking their customers," the attackers reportedly said on Telegram.
Cointelegraph reached out to Revolut and Römer for comment.
The compromised identification documents and facial-verification images could heighten the potential for identity theft. Revolut on Friday informed customers the compromised data also includes customers' full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions.
Revolut told Cointelegraph on Saturday that the customer data was leaked due to a "sophisticated external impersonation scam" in which the attacker used an email address from a legitimate government agency domain email to submit fraudulent requests for information.
Revolut later told Cointelegraph the breach affected a "limited number" of customers, and its systems and customer funds are unaffected.