Revolut has confirmed a significant data breach involving customer information, with the incident discovered on September 14, 2026. The leak is currently ongoing as the financial technology firm investigates the scope of the exposure and works to secure its systems against further unauthorized access.
The attackers have issued a ransom demand of 10,000 Bitcoin, valued at approximately $780 million. Investigators revealed that the threat actors exploited a legitimate government domain to bypass security protocols, allowing them to infiltrate the network and exfiltrate sensitive user data without triggering immediate alarms.
Key facts
- The breach was discovered on September 14, 2026, with the data leak still active.
- Threat actors are demanding a ransom of 10,000 BTC, equivalent to roughly $780 million.
- Customer data from Revolut has been compromised in the attack.
- Hackers utilized a legitimate government domain to circumvent security measures.
Why it matters
This incident highlights a sophisticated social engineering or supply chain vulnerability where trusted external domains were weaponized to defeat standard defensive perimeters. The massive financial stake involved underscores the escalating risks faced by digital banking platforms, while the use of official government infrastructure for malicious purposes raises serious concerns about broader cybersecurity hygiene and verification processes across critical sectors.