Key Takeaways:
- Hackers have reportedly begun to share personal data on the affected customers and ask for money to prevent more leaks from Revolut.
- Information exposed can range from identity documents to verification selfies, statements and Bitcoin transaction records.
- No individual accounts were impacted, said Revolut, and the systems and customer funds continue to be unaffected.
Threat actors are now threatening to release customer data shared on a fraudulent government information request, adding a fresh challenge to the calibration of Revolut. Crypto users may be interested in this incident as it could expose their detailed Bitcoin transaction records as well as personal and financial data.
Read More: Revolut Exposes Bitcoin Records, Passports After Fraudulent Government Email Attack
Attackers Begin Publishing Revolut Customer Data
The attackers have reportedly moved from demanding information to publishing data linked to Revolut customers online. International Cyber Digest said the group is threatening to release additional messages, customer files and internal information unless Revolut pays.
‼️ BREAKING: The threat actors who targeted Revolut with information-demand emails are now posting sensitive customer data, including that of high-profile clients such as tennis player Shevchenko and Römer, CEO of Gamdom/Skinscom.
They want Revolut to pay up. They say they’ll… pic.twitter.com/obuVOOABx7
— International Cyber Digest (@IntCyberDigest) September 13, 2026
Some of the reported material contains identity documents and verification selfies of high-profile customers. Rebecca has also been hit with accusations of a failure in the handling of private information by the attackers, and that they have moved sensitive data to a jurisdiction outside the scope of the UK and EU regulations.
The event doesn’t stem from any direct compromise of its main systems, according to Revolut. Rather, fraudulent requests for customer information have been reportedly made via a legitimate government agency email domain by an unauthorised party. The incident was labeled as a well-planned outside spoofing attack.
Read More: Revolut to Delist USDT by August amid Risk Concerns
Bitcoin Transaction Histories Among Exposed Data
The bit that is most important to the crypto users is the exposure of information of all what they are transacting.
The tampered files can contain Bitcoin transactions, account statements, IBANs, withdrawal dates and full payment history. Others that may be part of the compromised data are phone numbers and identification documents, addresses, and names, along with dates of birth.
This one combination makes it a different risk than a normal crypto exchange hack. No customer funds or private keys have ever been reported stolen, however, identification of a person with his/her Bitcoin transactions could reveal his or her financial information and may lead to targeted phishing or social engineering attacks.
Revolut Says Customer Funds Remain Safe
Revolut said the number of those affected was small and it made individual contact with those affected. The company doesn’t say how many people were involved.
The fraudulent requests were caught by Revolut and their email address was blocked. The company also informed relevant government authority, law enforcement, data protection agency and financial regulators.
This is the latest in Revolut’s ongoing growth in the crypto industry and its digital-asset services. This further heightens the importance of protecting customer identity and details regarding a transaction.
Now they claim that there are preparations for further leaking of customer data in the future. So for Revolut users who have or are trading BTC, the most immediate concern is not the loss of their assets from the platform, but how precious personal data is being used which they are linked to in direct connection with their crypto operations.
