Hackers have reportedly begun publishing personal information belonging to Revolut customers and are demanding payment to prevent further disclosures. The material may include identity documents, verification selfies, account statements and Bitcoin transaction records.

Revolut said that no individual accounts were compromised and that its systems and customer funds remain unaffected. The company said the number of affected customers was small and that it had contacted those individuals directly, although it did not disclose how many people were involved.

Attackers Begin Publishing Revolut Customer Data

The attackers have reportedly shifted from seeking customer information to publishing data linked to Revolut users online. International Cyber Digest said the group was threatening to release additional messages, customer files and internal information unless Revolut paid.

‼️ BREAKING: The threat actors who targeted Revolut with information-demand emails are now posting sensitive customer data, including that of high-profile clients such as tennis player Shevchenko and Römer, CEO of Gamdom/Skinscom. They want Revolut to pay up. They say they’ll… pic.twitter.com/obuVOOABx7 — International Cyber Digest (@IntCyberDigest) September 13, 2026

The reported material includes identity documents and verification selfies belonging to some high-profile customers. The attackers have also accused Revolut of mishandling private information and alleged that sensitive data was moved to a jurisdiction outside the scope of UK and European Union regulations.

According to Revolut, the incident did not result from a direct compromise of its main systems. Instead, an unauthorised party reportedly used a legitimate government agency email domain to send fraudulent requests for customer information. Revolut described the incident as a carefully planned external spoofing attack.

Bitcoin Transaction Histories Among Exposed Data

For crypto users, the reported exposure of transaction information is a central concern. The affected files may contain Bitcoin transaction records, account statements, International Bank Account Numbers (IBANs), withdrawal dates and complete payment histories.

Other potentially exposed information includes telephone numbers, identification documents, addresses, names and dates of birth. The combination of identity information with Bitcoin transaction histories creates a different type of risk from a conventional crypto exchange hack.

No customer funds or private keys have been reported stolen. However, linking an individual’s identity to their Bitcoin transactions could reveal financial information and potentially facilitate targeted phishing or social-engineering attacks.

Revolut Says Customer Funds Remain Safe

Revolut said it detected the fraudulent requests and blocked the associated email address. The company also notified the relevant government authority, law-enforcement agencies, data-protection authorities and financial regulators.

The incident comes as Revolut continues expanding its cryptocurrency and digital-asset services. It highlights the importance of protecting customer identities and information related to their transactions, particularly where personal records can be connected directly to crypto activity.

The attackers are reportedly preparing additional disclosures of customer data. For Revolut users who hold or trade BTC, the immediate issue described in the report is therefore not the loss of assets from the platform, but the possible misuse of personal information associated with their cryptocurrency operations.

Original source: CryptoNinjas