Digital banking giant Revolut has denied receiving any direct communication from cybercriminals, despite public ransom demands seeking millions of dollars in cryptocurrency following alleged data breach claims.
Conflicting Ransom Demands Surface
The fintech company found itself at the center of extortion claims after separate parties publicly demanded cryptocurrency payments in exchange for allegedly stolen data. One group reportedly sought $3 million paid in Monero, a privacy-focused cryptocurrency prized by criminals for its untraceable nature. A competing claimant escalated the situation with a demand for 10,000 Bitcoin.
The existence of rival extortionists making separate claims has raised questions about the legitimacy of the alleged breach. When multiple actors surface claiming the same compromised data, it often signals opportunistic bad actors attempting to capitalize on public attention rather than a verified security incident.
Two competing ransom demands but zero direct contact — the numbers don't add up.
Revolut Pushes Back
Revolut has stated that it received no direct contact from any party behind the ransom demands, a detail that undermines the credibility of the threats. Legitimate extortion typically involves private negotiations with the targeted company before public disclosure, making a purely public demand appear more like a pressure tactic or fabrication.
The choice of payment methods reflects broader trends in cybercrime. Monero remains a favorite among threat actors seeking to obscure the flow of funds, while Bitcoin demands of the scale reported here would be difficult to move without attracting significant scrutiny.
Key details in the situation include:
- A $3 million ransom demand payable in Monero
- A separate demand for 10,000 Bitcoin from a different party
- No direct contact reported by Revolut from either claimant
As the crypto sector continues to grapple with data security concerns, incidents like these underscore the challenges companies face in distinguishing genuine breaches from opportunistic extortion attempts. Revolut has not confirmed any compromise of customer data.