Revolut won’t disclose number of data breach victims in Malta, but there is at least one

Revolut would not disclose whether there are any victims of its data breach in Malta, however there is at least one.

The Financial Times reports that hackers obtained files by compromising an Italian government email system, which they then used to present themselves as law enforcement demanding information on specific client accounts from Revolut, one of Europe's biggest financial technology companies.

While a number of cybernews websites are mentioning Malta as one of the countries affected by the breach, when asked if any affected customers are in Malta a Revolut spokesperson said that it is not disclosing numbers per country. The spokesperson did say that in total 680 customers were affected. The company took immediate steps to investigate and contain any threat through additional security measures when they became aware of the issue, and have not seen any evidence that the issue is occurring more widely. The company said it continues to work closely with the enforcement and regulatory bodies.

But there is at least one victim in Malta.

Felix Römer, a German entrepreneur who lives in Malta, told the Wall Street Journal that he was surprised as to how a company of that size is storing his data and giving it out so easily. Posting on X, the founder of Gamdom, an online casino, said that he received a letter from Revolut a few days ago regarding his data breach, "but already 2 months ago me and others started to get blackmailed with the compromised data. It was was only properly communicated once it fully became clear to the public that Revolut gave out all this sensitive data."

The hacking group is reportedly demanding a $3 million ransom from Revolut and chose targets using blockchain analysis to identify user accounts which have significant crypto holdings.