Revolut confirmed that attackers used fraudulent information requests to obtain data relating to about 680 customers. The requests were sent through a compromised Italian government email system, according to reports by the Financial Times and the Guardian. Revolut said its internal systems were not breached and customer funds remained secure. The company contacted affected individuals and notified relevant authorities and regulators.
The Financial Times reported that the scheme operated over several months and primarily targeted customers believed to hold cryptocurrency. It said most affected customers were in Switzerland and France, with others in 31 other countries, mostly in Europe. The Guardian reported an alleged $3 million ransom demand. Revolut said it had received no direct demand from the alleged group.
FRAUDULENT REQUESTS USED GOVERNMENT EMAIL
Revolut said the incident involved the fraudulent misuse of an official, state-regulated legal communication channel, with a legitimate government agency email address used to impersonate genuine authority requests. The company blocked the address after identifying the fraud and alerted the relevant agency, law-enforcement bodies and data-protection and financial regulators.
The data obtained included customer addresses, verification photos and identity documents, according to Euronews. Mark Karpelès, the former Mt. Gox chief executive, said he was among those affected and raised concerns about his family’s safety.
SCOPE AND REGULATORY FOLLOW-UP
The affected customers represent about 680 of Revolut’s 80 million global customers, according to the Guardian. The UK Information Commissioner's Office said it had received a report about the incident and was assessing the information provided.
Italy’s postal police, state police, interior ministry and national cyber-security agency confirmed that investigations were under way, according to the Irish Times.