Skip to content
Leak-site post naming Revolut, captured by ThreatCluster

Revolut

imnotavillain

Ransomware leak-site victim intelligence

Data size
150GB
Posted
Sep 24, 2026
Country
GB
Industry
Financial Services

What was taken

Revolut user database exposed; data on sale; includes 85,000+ files and 150GB. Contains full name, email, phone number, address, account identifiers, bank account identifiers, crypto withdrawals, crypto deposits, fiat transactions, KYC documents, KYC verification selfie, and other personal data.

Data categories
PIIDatabasesEmailsFinancial dataKYC documents
Leak site tags
user dataKYCJurisdictionBanking

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a combination of a passport, a selfie, a mobile app interface showing account details, and a list of transaction history.
onion leak page1.2 MB
Screenshot of a file directory showing multiple compressed files labeled "Document Revo1.zip" and "Document Revo1.2.zip."
onion leak page179 KB
The image contains multiple account confirmation documents from Revolut, with a watermark stating "I Am Not A Villain" and some text translated to English.
onion leak page165 KB