Revolut has revealed that its customer data was compromised twice this month. The British bank disclosed that its customer data was breached on two occasions this month after its former third-party US broker, DriveWealth, fell victim to a social engineering attack. The security breach, disclosed today by Revolut and DriveWealth, occurred on September 4 and 5 and reportedly compromised names, email addresses, ages, genders, citizenship information, postal addresses, and employment details. Earlier this month, Revolut revealed that hackers had used an Italian government email address to access the company's data. The recently disclosed security breach does not include data from affected customers in the European Economic Area dating from after 2023. Neither Revolut nor DriveWealth disclosed the number of affected users or the details of the social engineering attack. Revolut emphasized that core infrastructure, funds, and accounts were not affected. https://x.com/maxkarpis/status/2103066301795127399 Negotiations with Revolut "did not go as planned." Ransom demands following the email-based attack ranged from $760 million in BTC to just $3 million in XMR a few days later. However, the hacker now claims that "negotiations did not go as planned" and has released the "Italy files," which contain data on 680 crypto whales. Journalist Jason Mikula noted that the hacker is selling the data for one-tenth of the demanded ransom, suggesting that "the group is struggling to monetize the data it exfiltrated." https://x.com/mikulaja/status/2102714434779021717 They also appear to be offering affected users—including Mt. Gox CEO Mark Karpelès—the option to pay to prevent the leak of their information.