Community Trust ScoreVerified
Attackers are leaking Revolut customer data one drip at a time — and they want money to stop.
The group behind the breach has already posted identity documents and selfies belonging to at least two named individuals: professional tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom. The leaked files reportedly contain full names, birth dates, occupations, contact information, account statements, and complete transaction histories — Bitcoin transactions included. And the attackers say they’ll keep publishing more every single day until Revolut pays up.
Not a small threat.
Revolut told affected customers the breach came through what it called a “sophisticated external impersonation scam.” The attackers apparently used an email address tied to a legitimate government agency domain to submit fraudulent data requests. Basically, they dressed up a fake request in official-looking clothes, and it worked. The system handed over customer data it probably shouldn’t have. Revolut hasn’t said which government domain was involved or which agency’s identity was spoofed, so the full picture of how this went down is still murky.
Gamdom CEO Among Confirmed Victims
Römer confirmed he heard from Revolut on Friday. The company reached out to warn him personally that his data was part of the leak and that he faced heightened risks of identity theft. His confirmation puts a real face on what might otherwise read as a corporate damage-control statement. For someone running a crypto casino — a business that already draws regulatory scrutiny — having your Bitcoin transaction history sitting on Telegram is a pretty serious problem.
Shevchenko’s data was also posted. No further details on what exactly appeared in his files were given by the source.
The attackers chose Telegram as their platform of choice, using it to communicate demands and to actually distribute the leaked files. It’s a familiar playbook in ransomware circles — Telegram’s relative openness and large user base make it easy to build pressure fast. The group is releasing data incrementally, which keeps the heat on Revolut without giving everything away at once. It’s calculated. Each new daily drop is essentially another reminder that the clock is ticking.
Revolut’s Position: Systems Safe, Scope Unclear
Revolut’s official line is that its core systems weren’t touched and that customer funds are secure. The company said the breach affected only a “limited number” of customers. But here’s the thing — Revolut hasn’t disclosed exactly how many people that covers. No number. No range. Just “limited,” which doesn’t tell affected users much.
That gap is probably what’s frustrating people most right now. Customers who haven’t been personally contacted are left guessing whether their data is sitting in a Telegram channel somewhere. Revolut seems to be focusing its communication on individuals it can confirm were hit, rather than issuing any broader public accounting of the incident’s scope.
The company hasn’t offered anything beyond its initial statement. No press conference, no updated FAQ on its site per the source, no named spokesperson walking through the timeline. Just the original warning to customers and the explanation about the impersonation scam.
For a fintech firm with millions of users across Europe and beyond, that’s a tight-lipped response to a very public extortion campaign.
What the Crypto Angle Means Here
The inclusion of Bitcoin transaction histories in the leaked data is worth sitting with for a second. Crypto transactions are pseudonymous, not anonymous — and pairing a full transaction history with someone’s real name, address, and government ID basically strips whatever privacy the blockchain offered. For Römer, whose professional life is built around a crypto gambling platform, that’s a specific kind of exposure that goes beyond garden-variety identity theft risk.
More broadly, the breach is a reminder that even if a crypto exchange or wallet is secure, the fintech layer sitting on top of it — the KYC data, the account statements, the selfies uploaded to verify identity — can still be a weak point. The blockchain didn’t get hacked. The data request process did.
It’s unclear whether any law enforcement agency has been brought in or whether Revolut has filed any formal complaints. The source didn’t specify. And the attackers’ demands — how much they’re asking for, in what currency, with what deadline — haven’t been made public either.
As of the latest reporting, no payment has been made and no resolution reached. The daily leaks are continuing.
Hub: Bitcoin price, news, and analysis
Frequently Asked Questions
What personal data was leaked from Revolut customers?
The leaked data reportedly includes selfies, identity documents, full names, birth dates, occupations, contact information, account statements, and full Bitcoin transaction histories.
Who are the confirmed individuals affected by the Revolut data breach?
Tennis player Alexander Shevchenko and Felix Römer, CEO of online crypto casino Gamdom, have both had their data posted publicly by the attackers.
How did attackers access Revolut customer data?
Revolut said attackers used a “sophisticated external impersonation scam,” submitting fraudulent data requests via an email address tied to a legitimate government agency domain.
Why It Matters
The exposure of personal and financial data from high-profile individuals like Felix Römer highlights the growing vulnerabilities within the cryptocurrency ecosystem, particularly as ransomware attacks become more sophisticated. This incident could further erode trust in digital financial services and raise concerns about data security among crypto users, potentially impacting market participation and regulatory scrutiny. As the crypto space continues to evolve, the implications of such breaches may influence user behavior and investment strategies in the broader market.
