Revolut, Europe’s biggest fintech, confirms breach exposing sensitive customer information

Revolut, Europe’s largest fintech company, has confirmed that an impersonation scam exposed personal information belonging to about 680 customers. Attackers reportedly compromised an Italian government email system and used a legitimate agency domain to send fraudulent requests that appeared official. The affected accounts are believed to have been targeted because their owners were suspected of holding cryptocurrency, with exposed data reportedly including home addresses.

Revolut said its internal systems and customer funds were not compromised. The company blocked the address involved, notified authorities and contacted affected customers. The Financial Times separately reported that an alleged hacker demanded a $3 million ransom and threatened to publish the stolen data, although Revolut says it has received no direct demand

Former Mt. Gox CEO Mark Karpelès was among those affected and said his home address was exposed, prompting him to contact police in Tokyo over safety concerns. He also said one victim was allegedly asked to pay $50,000 to have their data deleted. The incident comes as Revolut, recently valued at about $115 billion, considers a potential dual listing in London and New York.