Revolut Faces Extortion Threat as Hackers Leak Customer Data Daily
Attackers demand payment to stop releasing sensitive user information including IDs and transaction history.
1The Breach Announcement
Hackers began leaking sensitive Revolut customer data on September 14, 2026, including identity documents and selfies. They threatened to release more information daily unless the fintech company pays. The attackers communicated their demands through Telegram, escalating pressure on Revolut to respond to their extortion attempt.
2High-Profile Victims
Among the leaked data were documents belonging to tennis player Alexander Shevchenko and Gamdom CEO Felix Römer. The exposure of such high-profile individuals highlights the severity of the breach. The information was first reported by International Cyber Digest via an X post, bringing immediate attention to the security incident.
3Scope of Leaked Data
Revolut confirmed the leaked information includes customers' full names, birth dates, occupations, contact details, account statements, and complete transaction histories. Notably, Bitcoin transaction records were also compromised. This comprehensive data exposure significantly increases risks of identity theft and financial fraud for affected users.
4Attack Methodology
The breach resulted from a sophisticated impersonation scam where attackers used a legitimate-looking government domain email to submit fraudulent information requests. This social engineering tactic bypassed security measures, demonstrating how even regulated fintech platforms remain vulnerable to carefully orchestrated attacks.
5Company Response
Revolut assured customers that only a limited number of accounts were affected and that their systems and customer funds remain secure. The company has been working with cybersecurity experts to contain the breach while maintaining communication with affected users about protective measures they should take.
6Daily Release Threat
The attackers' strategy of gradually releasing data creates ongoing pressure on Revolut. By threatening daily leaks, they aim to maximize media attention and public concern, potentially forcing the company to negotiate. This approach mirrors tactics used in previous high-profile cyber extortion cases.
7Industry Implications
The Revolut breach highlights persistent security challenges in fintech, particularly around KYC (Know Your Customer) data protection. As digital banking grows, such incidents may prompt regulators to impose stricter data handling requirements and verification processes for financial institutions handling sensitive customer information.
8Customer Protection Advice
Cybersecurity experts recommend affected users enable two-factor authentication, monitor accounts for suspicious activity, and consider credit freezes. The exposure of transaction histories particularly requires vigilance against targeted phishing attempts that may reference specific financial activities to appear legitimate.