Revolut exposes data of 680 customers after hackers' fraud

Summary

Revolut experienced a significant data breach, revealing sensitive information from 680 customers after hackers impersonated government authorities using compromised Italian law-enforcement systems. The exposed data includes passport details, bank accounts, home addresses, identity-verification images, and Bitcoin activity, with threats of further publication if a ransom is not paid. In response to the incident, the UK Information Commissioner’s Office has launched an investigation, and Revolut has secured the compromised email account while notifying impacted individuals, which includes high-profile customers such as former Mt. Gox CEO Mark Karpelès. The attackers claimed the operation spanned several months and primarily affected individuals in Switzerland and France, along with users from the UK, Germany, Italy, and other countries.

Analysis

Revolut: Revolut is a financial technology company offering banking, payments, and cryptocurrency services to customers. In the reported incident, the company disclosed sensitive customer records after receiving fraudulent data requests sent through a legitimate government email account that had been compromised. Revolut responded by blocking the compromised account, notifying regulators and affected customers, and cooperating with an investigation by the UK Information Commissioner’s Office. Mark Karpelès: Mark Karpelès served as chief executive officer of the cryptocurrency exchange Mt. Gox. He was among the individuals whose personal and financial records were exposed in the Revolut data incident. Breach Method: Cybercriminals used compromised Italian law-enforcement systems to send fraudulent data requests impersonating government authorities over several months. Attacker Claims: The individual claiming responsibility alleged possession of additional stolen Italian law-enforcement data and stated that affected Revolut customers were primarily located in Switzerland, France, and several other European countries. Regulatory Response: The UK Information Commissioner’s Office opened an investigation following the disclosure of customer data by Revolut.

Categories

cryptotechbitcoin
View Original Tweet