Revolut says customer data was breached twice this month

Revolut said customer data was breached twice this month. The first breach involved an attack on former third-party US broker DriveWealth. The second breach involved hackers using an Italian government email to access Revolut's data. The breaches occurred on September 4 and September 5. The compromised data reportedly included names, email addresses, ages, genders, citizenship information, postal addresses, and employment details. The newer breach did not include data from affected European Economic Area customers past 2023. Revolut and DriveWealth did not disclose how many users were affected. They also did not disclose what happened during the social engineering attack. Revolut said its core infrastructure, funds, and accounts were not affected. Reported ransom demands after the email attack ranged from $760 million in BTC to $3 million in XMR. A hacker claimed that negotiations with Revolut did not go as planned. The hacker published the so-called Italy Files, which included data from 680 crypto whales. Journalist Jason Mikula said the hacker was selling the data at a price 10 times lower than the ransom. Mikula said this suggested that the group was struggling to monetize the data it had extracted. The hacker also reportedly offered affected users, including Mt. Gox CEO Mark Karpelès, the opportunity to pay to prevent their information from being leaked.