British fintech giant Revolut is reportedly facing an extortion attempt after hackers claimed to have breached customer data and demanded a $3 million ransom paid in Monero, the privacy-focused cryptocurrency.
The Alleged Breach
According to reports, the attackers say they gained access to sensitive customer information and are threatening to sell it unless Revolut meets their payment demands. The choice of Monero as the ransom currency is notable, as the privacy coin is designed to obscure transaction details, making payments difficult to trace.
The hackers claim they identified their targets through a deliberate process rather than random selection. By scanning public blockchain records, they say they pinpointed Revolut accounts holding substantial cryptocurrency balances, then focused their efforts on those users.
The attackers say they hunted their victims by scanning the blockchain for Revolut accounts flush with crypto.
The approach highlights a growing security concern for fintech platforms that bridge traditional banking and digital assets. As more users hold crypto within these services, the pseudonymous nature of blockchain transactions can inadvertently expose which accounts are worth targeting.
Implications for Customers
The reported incident raises fresh questions about the safety of holding significant crypto balances on centralized platforms, where user data and on-chain activity can potentially be linked. Security researchers have long warned that public blockchains, while transparent by design, can serve as a roadmap for bad actors seeking high-value targets.
For affected users, the primary risks extend beyond the immediate breach:
- Potential exposure of personal and financial data
- Increased vulnerability to phishing and social engineering attacks
- The possibility of stolen information being sold on illicit markets
Revolut, which serves millions of customers across Europe and beyond, has faced scrutiny over security matters before. The company has not fully detailed its response to the latest extortion claims, and the full scope of any data compromise remains unclear as the situation develops.