Revolut Hack Exposes Crypto Users' Data, Hackers Want $3 Million to Stay Quiet
Sep 17, 2026
A breach at Revolut reportedly exposed ID documents and transaction records tied to crypto-heavy accounts, and the attackers are demanding a ransom.
A Ransom Note With Real Stakes
According to the Financial Times, the hackers behind a recent Revolut breach are demanding $3 million to keep stolen customer data from going public. The attackers reportedly tricked the fintech into handing over sensitive information rather than breaking in through a technical exploit.
The exposed data isn't just names and emails either. It includes identity documents, home addresses, and transaction records tied specifically to crypto-heavy accounts — exactly the kind of information that makes users targets for phishing, SIM-swap attacks, and worse.
Social Engineering Strikes Again
This fits a pattern that's been showing up across the industry all year: attackers going after the humans and support processes around an exchange or fintech, rather than the blockchain itself. As more traditional finance apps add crypto features, they inherit crypto's target on their back too.
Revolut hasn't confirmed whether it plans to pay. For now, affected users are left waiting to see if their data stays private.