Cybercriminals demand Revolut pays $3 million or they resell data of 680, incl. 36 Dutch

The cybercriminals who claim responsibility for the phishing attack on online bank Revolit are demanding 3 million dollars, or they will resell the data. The stolen information from 680 customers, of whom 36 are Dutch, including passport copies, names, addresses, transaction histories, phone numbers, and more, BNR reported. The bank called the attack a “sophisticated external impersonation fraud.”

Criminals had allegedly first approached Revolut using the email addresses of a government agency and submitted an information request. The bank released the data to the criminals, treating the request as authentic.

The criminals demand a payment through cryptocurrency called Monero.

The suspects reportedly shared a video with the BNR, showing a screen recording of the data that they have. According to the newspaper, the footage confirmed that Revolut’s Italian operations were targeted. A mailbox in the video in question allegedly belongs to Italy’s Ministry of Interior, which, according to the BNR, “strongly suggests" that the criminals might have pretended to be from the ministry to get the information.

It was earlier reported that a Dutch singer, Yade Lauren, is among the victims.