75 million Revolut records allegedly for sale: here's what our researchers found

Credit card data, along with other private information allegedly belonging to Revolut customers, is up for sale, attackers claim. Meanwhile, Revolut says the company doesn’t see any indications of a data breach.

A threat actor has just listed a database allegedly containing 75 million records of Revolut customers on a cybercrime forum.

To support their claims, the threat actor posted a data sample that our researchers have investigated. Over 100 sample records provided in 4 .csv files suggest that the following kind of private data may be exposed in the dataset:

• Partial credit card data: last 4 card digits, card type, expiration dates, and card statuses (active, blocked, frozen, etc).
• User credentials: bcrypt or argon2id hashes, timestamps when the credentials were rotated.
• User personal data: emails, full names, phone numbers, resident countries, addresses, currency, registration IP address, and other account identifiers
• Other sensitive data: including device models, operational systems, and timestamps.

The newest records in the samples appear to date back to around May 2025, and our researchers found no evidence linking the dataset to any previously documented breaches.

Revolut is “looking into it”

We have reached out to Revolut for comment. The company’s spokesperson said they are aware of the claims. However, they “see no indications of any breach.”

“We're aware of the post and, as it notes itself, the listing contains no record count, no sample and no technical detail, nothing that substantiates the claim,” the spokesperson said.

“We're continuing to look into it,” they added.

However, the company has not provided any additional comments on the over 100 sample records listed in the forum.

The dataset may be compiled from multiple sources

Cybernews researchers could not verify the claimed number of records and remain skeptical about the claimed scope of the dataset. If the dataset really contains 75 million records, the $500 price tag advertised on the illicit marketplace is unusually low for a leak of that size.

The origin of the data remains unknown. However, our researchers believe that the listing is more likely an aggregation of data collected from multiple sources rather than the result of a newly discovered breach.

The wording of the forum post also suggests that the seller may have compiled the information from multiple sources.

Revolut users may be targeted by phishing attacks

If the claims prove to be legitimate, the exposed information could pose serious risks to affected individuals.

Criminals could combine names, contact information, device details, and partial financial information to build convincing phishing attacks.

“The impact would be pretty severe for these people. They are at risk of social engineering attacks and identity profiling. Attackers may also attempt to gather full payment method information,” Cybernews researchers warned.

Revolut has been breached before

There is no confirmation yet if the attacker's claims carry any weight. If the data proves to be legitimate, it will not be the first time Revolut users ‘ data has been exposed.

In 2022, a highly targeted cyberattack affected over 50,000 Revolut customers. At the time, Revolut said the card data was secure because it was hashed.

Headquartered in London, the fintech company has 75 million retail customers and more than 800,000 business customers worldwide. The company boasts $6 billion in annual revenue.