UK Crypto Investor Robbed of $800K in Home Invasion Linked to Revolut Data Breach

Home Invasion Targets Crypto Investor

A cryptocurrency investor in the UK has reportedly been held at knifepoint, restrained, and robbed of approximately $800,000 in cryptocurrency during a home invasion. The victim described the attack in a post on X, formerly Twitter, claiming that intruders taped them up and stole cryptocurrency and other valuables.

"Three knives to my face saying they were gonna kill me, $40k from my main wallets $720k from one of my ledgers, rolex, took my phone and smashed it up," the victim wrote. In a follow-up exchange on X, the victim confirmed they used Revolut for their banking operations.

Stolen Revolut Data May Have Enabled the Attack

Other X users pointed out that the victim's data was for sale following the recent Revolut breach, raising concerns that stolen banking records could help criminals identify wealthy cryptocurrency holders and target them in the physical world.

Cybersecurity firm Hudson Rock flagged the incident's potential link to Revolut on October 13th. The researchers warned that compromised customer information could give criminals a dangerous combination of personal and financial details, potentially allowing them to identify targets and locate their homes.

"Threat actors now have access to exact physical addresses alongside financial profiles. This creates a highly targeted hit list for physical extortion and robbery," Hudson Rock researchers said.

How the Revolut Breach Unfolded

The incident comes weeks after a reported breach of Revolut, the UK-founded fintech company. In September, data from Revolut customers was breached after attackers placed a fraudulent order from a spoofed agency in Italy to obtain information. Hackers threatened to sell the data unless $3 million was paid, and individual victims were also spared if they paid to have their data removed from the dataset.

The exposed information reportedly included Know Your Customer (KYC) records from customers across Europe. According to the threat actor, the operation against Revolut lasted for six months. The hackers allegedly used a stolen Italian government employee's email account to send large numbers of cryptocurrency transaction IDs via fake European Investigation Orders and to request personal information associated with the accounts for several weeks.

Revolut's team treated the request as legitimate and sent hundreds of files containing sensitive customer information. All the data belongs to high-value crypto holders or accounts that made big transactions.

Sources: Cybernews