Thought Leadership
A hacker claims to be selling 75 million Revolut customer records. The company says it has found no evidence of a breach.
A threat actor has offered a database for sale on a cybercrime forum that allegedly contains 75 million customer records from financial platform Revolut. To support the claim, the seller provided a sample dataset consisting of four CSV files containing more than 100 records. An analysis of the samples by security researchers at Cybernews found that the data included partial credit card information, such as the last four digits, card type, expiration date, and card status.
The data also reportedly included user credentials in the form of password hashes using Bcrypt or Argon2id, password change timestamps, and personal information such as first and last names, email addresses, phone numbers, countries of residence, and registration IP addresses. Device information and operating system versions were also included. The most recent records in the samples dated back to May 2025.
Revolut Responds as Questions Arise Over the Data Source
Revolut told Cybernews that it was aware of the forum post but had so far found no evidence that its systems had been compromised. A company spokesperson said:
“We are aware of the post and, as it itself states, the listing contains no number of records, no sample and no technical details, nothing to substantiate the claim. We are continuing to investigate this.”
Revolut
Cybernews security researchers expressed doubts about the alleged scale of the dataset, which is said to contain 75 million records. The asking price of $500 would be unusually low for a data breach of this magnitude. The analysts also suspect that the dataset may be a compilation of information collected from various existing sources rather than the result of a new system breach.
Potential Risks for Affected Users
If the data proves to be authentic, the combination of contact details, device information, and partial financial data could be used to launch targeted phishing and social engineering attacks. Cybernews security researchers warned of potentially serious consequences for affected individuals:
“The impact would be quite severe for these people. They are at risk of social engineering attacks and profiling. Attackers could also try to gather complete information about payment methods.”
Revolut has around 75 million retail customers and 800,000 business customers worldwide. The company was already targeted in a cyberattack in 2022, when data belonging to more than 50,000 customers was compromised.
(ll)
