Revolut will pay for replacement of passports to customers whose data was transferred to hackers
In September, the bank gave the hacker group “I’m not a villain” customer data, accepting a fake request from government agencies as genuine. The attackers demanded a ransom of $3 million and threatened to sell the data. Revolut refused to pay
British fintech company Revolut will pay the costs of customers who want to change identity documents in connection with the disclosure of customer data, said Revolut CEO for Western Europe Beatrice Cossa-Dumurgier TV channel BFM TV.
"If they ever have to change their identity documents, we will bear the associated costs," she said.
In September, Revolut gave hackers customer data, accepting a fake request from government agencies as genuine. According to TechCrunch, “an unauthorized third party used a legitimate government email domain to send fraudulent requests for information.” Later, a hacker group calling itself iamnotavillain (I am not a villain) threatened Revolut with selling confidential customer data unless the bank paid $3 million within 24 hours. According to TechCrunch, the compromised data included customer dates of birth, contact information, passport copies. The breach may have affected at least 680 Revolut accounts.
Cossa-Dumurgier clarified that the company will not pay ransom to hackers. The bank has assisted 680 affected customers, 55 of whom are in France.
Revolut is a British fintech company founded in 2015. It provides banking and financial services through the mobile application: accounts and cards, transfers and exchange of currencies, savings, loans, investments and insurance. In 2026, Revolut received a full banking license in the UK and continues to expand banking operations in other countries.
As of July 2026, Revolut served more than 75 million customers worldwide.
