From Pymnts · PYMNTS · · 1m 20s
Revolut hit with extortion after email scam exposes customer data
A hacker is releasing stolen data and demanding ransom after tricking the fintech into handing over customer information.
In brief
A hacker is releasing stolen data and demanding ransom after tricking the fintech into handing over customer information. Impersonation scams using fake government emails can fool even major financial companies, exposing customers to extortion and targeted attacks. Originally reported by Pymnts.
Hacker demands ransom from Revolut
After exposing customer data in an email scam last week, a hacker is now releasing stolen information and threatening more unless Revolut pays.
Scammer used fake government email
An unauthorized party tricked Revolut using a legitimate government email domain. The company blocked the address and notified authorities.
Only 680 customers affected
Around 680 people were impacted, a tiny fraction of Revolut's 80 million customers. Systems and customer funds remain unaffected.
“Revolut systems and customer funds are unaffected.”
High net worth crypto users targeted
The breach appears to have targeted wealthy digital asset holders. Some now fear 'wrench attacks' where criminals use violence threats to steal crypto keys.
Hacker releases data on Telegram
A hacker calling themselves 'I Am Not A Villain' posted stolen materials on Telegram, threatening daily releases until Revolut pays.
“We're gonna start releasing more and more data everyday until revolut [sic] pays for leaking their customers.”
Impersonation scams are widespread
81% of successful scams involve criminals pretending to be trusted authorities or contacts. These tactics will grow as AI technologies evolve.
“Scammers exploit trust across all communication channels, from phone calls and email to social media and online ads.”
The bottom line
Impersonation scams using fake government emails can fool even major financial companies, exposing customers to extortion and targeted attacks.
