BreachPublished 17 Sep 2026

Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

Source SecurityWeek

Description

Revolut experienced a data breach lasting approximately five months, during which hackers impersonated an Italian government agency to obtain customer information. The attackers used compromised government employee email accounts to send fraudulent legal requests to Revolut Bank UAB, which complied without verifying legitimacy. Approximately 680 high-profile customers, including cryptocurrency holders, had personal and financial data exposed. The hackers demanded a $3 million ransom, threatening to sell the stolen data. The breach also involved theft of over 147GB of data from an Italian law enforcement agency. Italian authorities are investigating the incident.

Impact

The breach compromised sensitive personal and financial information, including passports, email addresses, phone numbers, and financial data, of approximately 680 high-profile Revolut customers. The exposure of such data poses risks of identity theft, financial fraud, and privacy violations. The attackers also obtained a large volume of law enforcement data (147GB), potentially impacting public safety and law enforcement operations. The ransom demand and threat to sell the data indicate potential further exposure and exploitation.

Defensive guidance

As this breach involved social engineering and fraudulent legal requests, mitigation should focus on strengthening verification processes for legal and government requests. Revolut and similar organizations should implement stringent validation of such requests before compliance. Monitoring and securing government employee accounts to prevent compromise is also critical.

References

securityweek.com/revolut-data-breach-5-months-680-high-profile-accounts-3m-ransom/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 17 Sep 2026, 14:01 UTC

References

Community reviews