Revolut attackers threaten daily customer data leaks
Attackers reportedly published identity documents and selfies belonging to Revolut customers and threatened to release more data each day until the fintech pays.
Asanat Analysis — Why it matters
Revolut's breach represents operational security failure at a major crypto-on/off-ramp, exposing how centralized fintech intermediaries remain single points of failure despite blockchain's trust minimization properties. The attackers' daily leak threat is a known extortion tactic; similar campaigns against Twitch, Toyota, and others rarely stop once demands are met, suggesting this may signal broader targeting of regulated crypto gateways.
The incident carries second-order implications for retail DeFi adoption. Revolut processes significant fiat-to-crypto flows for European users; customer confidence erosion could temporarily shift volume toward competitors (Kraken, Coinbase) or accelerate migration to decentralized on-ramps, though regulatory friction limits that option. The leakage of identity documents also weaponizes KYC data itself—a structural risk in custodial models that non-custodial protocols structurally avoid but cannot fully address for regulated entry/exit.