Threat actors who obtained sensitive Revolut customer information have begun posting the data online and are threatening to release more every day unless the bank pays.
The attackers revealed their targets in an X post by International Cyber Digest on Sunday, saying newly leaked information includes selfies and copies of identity documents belonging to tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom.
"We're going to start releasing more and more data everyday until revolut pays for leaking their customers," the attackers reportedly said on Telegram.
Revolut told Cointelegraph on Friday that the leaked data includes customers' full name, date of birth, occupation, contact information, account statements and full transaction history, including records of Bitcoin transactions. The exposure of identity documents and facial-verification images could heighten risks of identity theft.
On Saturday, Revolut said the breach resulted from a "sophisticated external impersonation scam" in which the attacker used an email address from a legitimate government agency domain to submit fraudulent requests for customer information.
The bank later said the breach affected a "limited number" of customers and that its systems and customer funds remain unaffected.
