# Revolut says it received no direct ransom demand after customer data disclosure

Canonical: https://chainincident.com/news/6f9f47e1-1e73-4840-9381-9a80a6e847df
Published: 2026-09-17T12:25:53.789Z
Publisher: Chain Incident

Reuters reports a public extortion threat, while the company describes fraudulent requests from a government email domain.

Revolut told Reuters on September 16 that it had received no direct contact or demand from those claiming responsibility for a customer data breach. The [Reuters report, carried by Euronext](https://live.euronext.com/en/financial-news/revolut-says-no-direct-demand-received-over-alleged-data-breach), followed reports of a public ransom ultimatum.

Reuters cited the Financial Times as reporting a $3 million demand and a threat to sell customer records. That is a reported claim by the attackers, not confirmation that negotiations occurred or that Revolut paid them.

## What the company has acknowledged

Revolut previously said sensitive customer information reached an unauthorized third party after fraudulent requests arrived from a legitimate government agency email domain.

A source familiar with the matter told Reuters that approximately 680 customers were affected and that core infrastructure, databases and customer accounts had not been hacked. The count is an attributed estimate.

The distinction matters: unauthorized disclosure through an information-request process is different from evidence that attackers directly accessed customer accounts. The absence of direct contact does not negate the disclosure.

## Sources

- [Revolut says no direct demand received over alleged data breach](https://live.euronext.com/en/financial-news/revolut-says-no-direct-demand-received-over-alleged-data-breach) — Reuters via Euronext

- [Editorial policy](https://chainincident.com/editorial-policy)
- [Request a correction](https://chainincident.com/corrections)