Revolut Confirms No Ransom Demand After Data Breach Incident
Revolut has disclosed that customer data, including Bitcoin transaction histories, was shared following a government request that experts suspect may have been fraudulent. According to a spokesperson for the company, there has been no direct communication with the group claiming responsibility for the breach, nor has Revolut received any ransom demands.
Customers affected by the breach have been informed that their personal and financial records were shared due to this potentially fraudulent request. The disclosed information reportedly includes identity documents, contact details, International Bank Account Numbers (IBANs), and account records. Onchain investigator ZachXBT noted that the incident seemed to target high-net-worth users but was likely limited in scope.
Reports from the Financial Times indicated that attackers had initially demanded $3 million within 24 hours, threatening to sell confidential information belonging to hundreds of customers to other criminal organizations. A source familiar with the situation stated that Revolut's core infrastructure, databases, and customer accounts remained uncompromised, with approximately 680 customers believed to have been affected by the breach.
Cleared to File
The group responsible for the breach, which identifies itself as "iamnotavillain," published an online ultimatum accompanied by a countdown clock. They claimed this was the first time their website was used to issue demands and stated that there had been no negotiations with Revolut regarding the incident.
