Revolut attackers threaten daily customer data leaks

[TastyChillySauce00]

Consider all the data leaked, Revolut knew if they paid for the ransom there will be another ransom, it's such a shame that we're getting endless KYC breach and yet KYC is still enforced heavily. Maybe 20 years later there will be no person on earth left whose KYC data haven't been leaked to the internet.

Hmm, do you think Revolut will pay the ransom and "save" its user's data? The hackers are demanding 10,000 BTC.

The hackers are now demanding for 6000 XMR which is around $3 million according to where I just read it from. This is where I just read about it: https://decrypt.co/378472/revolut-hackers-demand-3m-monero-ransom-threaten-to-sell-customer-data-report

But that is still huge amount of money.

It is very possible the hackers will reduce the price or Revolut may bid the price down if they care about their customers. Bit I do not think any company care about their customers to the point of paying such amount of money.

It is better Revolut customers sue Revolut if the data is out.

Revolut says it has received no direct contact or demand.

Apparently there are two groups demanding for money, one demands 10k BTC the other 6000 XMR, the problem is the hacker that demanded 6000 xmr implied that the other group who demanded 10000 BTC could be a former associate who have part of data, even if revolut paid 6000 xmr data could still leak regardless.

[Z-tight]

So why should revolut keep passport pictures of millions of individuals is so beyond me.

So that they can hand it over to law enforcement when they receive a valid request, just like they intended doing in this situation, but were too stupid and naive to confirm who was making the request and if it was valid.

However, i think it is normal for centralized services to retain kyc information of their customers, i don't find anything unusual about that.

[PrivacyG]

However, i think it is normal for centralized services to retain kyc information of their customers, i don't find anything unusual about that.

Then get your self used to all that information being usually leaked all over the Internet.  That will not be unusual at all any more in a matter of years.  They all 'securely' store all that information but it always gets pulled out one way or another and then leaked or sold.  Know Your Customer is B S and should not be usual.

[Z-tight]

However, i think it is normal for centralized services to retain kyc information of their customers, i don't find anything unusual about that.

Then get your self used to all that information being usually leaked all over the Internet.  That will not be unusual at all any more in a matter of years.  They all 'securely' store all that information but it always gets pulled out one way or another and then leaked or sold.  Know Your Customer is B S and should not be usual.

I very well know how dangerous kyc is and i have said it a million times aleady in this forum, that is not up for debate, neither is that what i am talking about. Centralized services store kyc data, irrespective of what you and i think about it and i am surprised when someone finds it unusual that they keep such data, that has to be the most obvious thing in the industry.

To be fair to custodial services though, there are other ways your personal data can end up in the black market, i.e. by purchasing a Ledger hardware wallet. Or Trezor, ShipMonk recently screwed them over.

[PrivacyG]

To be fair to custodial services though, there are other ways your personal data can end up in the black market, i.e. by purchasing a Ledger hardware wallet. Or Trezor, ShipMonk recently screwed them over.

Of course.  It is a chain of vulnerable Third Parties and you are lucky if you do not fall through one of the vulnerabilities.  There are many ways the personal data can end up on Black Markets but then there are also many ways to make sure your real personal data is never used.  For example.  Do not use personal information for a delivery that, if others know about, could make you a target?

[Z-tight]

For example.  Do not use personal information for a delivery that, if others know about, could make you a target?

I am not sure you can completely avoid that, yeah, you can limit the personal information your provide, for example, paying with BTC instead of credit card. However, you'd still have to provide shipping details that would include personal information.

Trezor are about to roll out anonymous delivery option for their EU and U.S. customers, but i do not have all the details about how it would work. Implementations like this is what would reduce third party data leaks, like the ShipMonk breach.