Alleged Revolut Data Breach Claims Impact Over 757 Million Users
A threat actor has claimed to possess and sell a massive dataset allegedly tied to fintech company Revolut, potentially affecting over 757 million users. The claim, shared by the CyberWatch threat intelligence account on X (July 25, 2026), suggests the dataset includes sensitive customer and financial data, though its authenticity remains unverified.
The purported breach may contain payment card details, user credentials, device information, customer profiles, and account records, along with multiple CSV files of user data. However, key details such as whether the data is current, unique, or sourced from Revolut directly remain unclear. The figure of 757 million could represent duplicates, scraped data, or a mix of legitimate and fabricated records.
If confirmed, the exposure could enable credential-stuffing attacks, account takeovers, phishing, social engineering fraud, and identity theft. Payment card data, if included, might also lead to unauthorized transactions, though it is unknown whether full card details (e.g., CVV codes) are present.
Revolut has not publicly confirmed the breach, and security experts caution that such claims often involve exaggerated or repackaged data. Independent verification such as analyzing sample records for freshness, consistency, and ties to Revolut would be required to confirm the breach’s validity.
As of now, the dataset remains unverified, and no official statement from Revolut has been issued. The incident underscores the risks of unverified breach claims in cybercriminal marketplaces.
Source: https://gbhackers.com/threat-actor-claims-revolut-data-breach/
Revolut cybersecurity rating report: https://www.rankiteo.com/company/revolut
"id": "REV1785327822",
"linkid": "revolut",
"type": "Breach",
"date": "7/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '757000000',
'industry': 'Financial Services',
'name': 'Revolut',
'type': 'Fintech Company'}],
'data_breach': {'data_exfiltration': 'Claimed',
'file_types_exposed': ['CSV'],
'number_of_records_exposed': '757000000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Payment card details',
'User credentials',
'Device information',
'Customer profiles',
'Account records']},
'date_publicly_disclosed': '2026-07-25',
'description': 'A threat actor has claimed to possess and sell a massive '
'dataset allegedly tied to fintech company Revolut, '
'potentially affecting over 757 million users. The claim '
'suggests the dataset includes sensitive customer and '
'financial data, though its authenticity remains unverified. '
'The purported breach may contain payment card details, user '
'credentials, device information, customer profiles, and '
'account records. The figure of 757 million could represent '
'duplicates, scraped data, or a mix of legitimate and '
'fabricated records. If confirmed, the exposure could enable '
'credential-stuffing attacks, account takeovers, phishing, '
'social engineering fraud, and identity theft.',
'impact': {'brand_reputation_impact': 'Potential',
'data_compromised': 'Payment card details, user credentials, '
'device information, customer profiles, '
'account records',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential',
'payment_information_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': 'Claimed'},
'investigation_status': 'Unverified',
'motivation': 'Financial Gain',
'references': [{'date_accessed': '2026-07-25', 'source': 'CyberWatch (X)'}],
'title': 'Alleged Revolut Data Breach Claims Impact Over 757 Million Users',
'type': 'Data Breach'}