BlockBeats news, September 14: A group of hackers claiming to possess Revolut customer data has begun publicly releasing related files, with the leaked information reportedly including sensitive data such as passports, selfies, and Bitcoin transaction records.
The hackers are simultaneously pressuring Revolut to pay a ransom, threatening to continue publicly releasing more customer data every day if their demands are not met. Whether all the relevant data is authentic, the scale of the leak, and the specific methods by which the hackers obtained the data still require further verification.
BlockBeats previously reported that on September 13, Revolut disclosed that an unauthorized third party used an email under the real domain of a government agency to submit fraudulent customer data retrieval requests, resulting in the disclosure of sensitive information of a small number of customers. The company called the incident a "sophisticated external impersonation scam," has now banned the relevant email, and stated that its own systems and customer funds were not affected.
The information that may have been disclosed includes names, dates of birth, addresses, email addresses, phone numbers, copies of identity documents such as passports and driver's licenses, identity verification selfies, account statements, IBANs, withdrawal records, and complete transaction histories, including Bitcoin transaction records. Former Mt. Gox CEO Mark Karpelès stated that he is one of those affected.
