Credit card data, along with other private information allegedly belonging to Revolut customers, is up for sale, attackers claim. Meanwhile, Revolut says the company doesn’t see any indications of a data breach. A threat actor has just listed a database allegedly containing 75 million records of Revolut customers on a cybercrime forum. The newest records in the samples appear to date back to around May 2025, and our researchers found no evidence linking the dataset to any previously documented breaches. The sample reviewed by Cybernews appears to contain referral-related flags. These referral indicators suggest the dataset may include information tied to the company’s customer referral program, a feature that rewards users for inviting new customers to the platform.To support their claims, the threat actor posted a data sample that our researchers have investigated. Over 100 sample records provided in 4 .csv files suggest that the following kind of private data may be exposed in the dataset:

Full report : 75 million Revolut records allegedly for sale, Revolut customers should be on look out for phishing attacks.