A threat actor has just listed a database allegedly containing 75 million records of Revolut customers on a cybercrime forum. The threat actor posted over 100 sample records.
Cybernews researchers have investigated the dataset. Here’s what was included:
- Partial credit card data: last 4 card digits, card type, expiration dates, and card statuses (active, blocked, frozen, etc).
- User credentials: bcrypt or argon2id hashes, timestamps when the credentials were rotated.
- User personal data: emails, full names, phone numbers, resident countries, addresses, currency, registration IP address, and other account identifiers
- Other sensitive data: including device models, operational systems, and timestamps.
Cybernews has reached out to Revolut for comment. The company’s spokesperson said they are aware of the claims. However, they “see no indications of any breach.”
Cybernews researchers could not verify the claimed number of records and remain skeptical about the claimed scope of the dataset. If the dataset really contains 75 million records, the $500 price tag advertised on the illicit marketplace is unusually low for a leak of that size.
If the claims prove to be legitimate, the exposed information could pose serious risks. “Affected individuals may be at risk of social engineering attacks and identity profiling. Attackers may also attempt to gather full payment method information,” Cybernews researchers warned.
For more information, here’s the full report: https://cybernews.com/security/revolut-data-breach-75-million-records/
Related
This entry was posted on July 27, 2026 at 9:02 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
75 million Revolut records allegedly for sale on cybercrime forum
A threat actor has just listed a database allegedly containing 75 million records of Revolut customers on a cybercrime forum. The threat actor posted over 100 sample records.
Cybernews researchers have investigated the dataset. Here’s what was included:
Cybernews has reached out to Revolut for comment. The company’s spokesperson said they are aware of the claims. However, they “see no indications of any breach.”
Cybernews researchers could not verify the claimed number of records and remain skeptical about the claimed scope of the dataset. If the dataset really contains 75 million records, the $500 price tag advertised on the illicit marketplace is unusually low for a leak of that size.
If the claims prove to be legitimate, the exposed information could pose serious risks. “Affected individuals may be at risk of social engineering attacks and identity profiling. Attackers may also attempt to gather full payment method information,” Cybernews researchers warned.
For more information, here’s the full report: https://cybernews.com/security/revolut-data-breach-75-million-records/
Share this:
Like this:
Related
This entry was posted on July 27, 2026 at 9:02 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.