Revolut Denies Receiving Direct Ransom Demand After Reported Data Breach

Revolut said it has not been contacted directly by hackers following a reported data breach and denied receiving a ransom demand for $3 million. The incident has renewed attention on the risks financial platforms face when storing sensitive customer identity information.

Revolut Reports No Direct Hacker Contact

Revolut said it has received no direct communication from the individuals reportedly linked to the breach. The company’s statement follows claims of a $3 million ransom demand, although the available information does not establish that the demand was made directly to Revolut.

The company did not provide further details about the reported incident or identify the parties allegedly responsible. It also remains unclear whether any customer information was accessed or compromised.

KYC Requirements Increase Data-Storage Risks

Jonathan Riss, an analyst at blockchain security firm CertiK, said mandatory know-your-customer (KYC) requirements can make financial and cryptocurrency platforms attractive targets for attackers.

KYC procedures require companies to collect and retain personal information used to verify customers’ identities. Depending on the platform and jurisdiction, this data may include names, addresses and government-issued identification details.

Riss warned that the concentration of sensitive identity data creates additional security risks if a platform’s systems are breached. The incident highlights the challenge companies face in balancing regulatory compliance with the protection of customer information.