Revolut hackers demand $3 million ransom, FT reports

•1mo ago

Revolut hackers demand $3 million ransom, FT reports

Tap title to read story

0:00 / 1:14

Hackers behind a data breach at British fintech firm Revolut have demanded a three million dollar ransom, threatening to expose confidential records of hundreds of customers. The extortion demand emerged when attackers contacted the company with a twenty four hour ultimatum, warning that user data would be sold to rival criminal groups if payment was refused. Revolut officials faced immediate pressure to secure affected systems and communicate with regulatory authorities across jurisdictions. The incident underscores escalating cybersecurity threats targeting digital financial institutions holding sensitive consumer information. Security researchers noted that data exfiltration remains a primary leverage tool for modern cybercriminal networks operating globally. Revolut representatives did not immediately issue public statements addressing the specific extortion claims outside standard business hours. Financial regulators are monitoring compliance requirements related to customer notification procedures and data protection standards. Industry analysts emphasize that paying cyber ransoms often fails to guarantee data deletion or prevent further security compromises.

Published 2026-09-16 19:36:12 UTC · Published by JQJO

Published by JQJO Editorial Desk · AI assisted

More context

Timeline

On September 14 2026 hackers initiated a data breach at Revolut.
On September 15 2026 attackers issued a twenty four hour ransom ultimatum.
On September 16 2026 the Financial Times reported the three million demand.
On September 16 2026 security analysts evaluated potential risks for fintech firms.
On September 16 2026 regulatory bodies reviewed applicable data protection compliance standards.
On September 16 2026 Revolut withheld immediate public comments outside business hours.
On September 17 2026 cybersecurity experts advised against paying digital extortion demands.
On September 17 2026 industry observers monitored consumer protection responses across markets.
On September 17 2026 investigators examined how attackers accessed confidential customer records.
On September 17 2026 initial impact assessments measured potential exposure levels for users.

Why it matters

Immediate US impact: Increased regulatory scrutiny on fintech data security practices nationwide. Possible long-term US impact: Stricter compliance mandates for digital asset and financial protection. Most affected groups: Revolut customers, investors, and British financial technology sector businesses. Reader priority: Verify primary sources and monitor official regulatory compliance updates closely.

Coverage notes

Left: Emphasizes corporate regulatory accountability and systemic consumer privacy protections. Center: Reports factual statements regarding the ransom demand and breach. Right: Focuses on market risks, financial impacts, and security vulnerabilities.