‼️ BREAKING: The Revolut hacker has shared with Duel's investigation team, for the first time, a complete video showing the scale of his information treasure trove. Multiple celebrities are included in the leaks. The hacker plans to announce his ransom demands today. Here's everything we know about the case so far: - As we established in our previous posts, the hacker gained access to an Italian government email address through an infostealer. - Over the course of several months, using fake European Investigation orders, the hacker would submit large numbers of cryptocurrency transaction IDs to Revolut asking for all personal information associated with the accounts to be sent over. Revolut complied, sending hundreds of files, all belonging to high value crypto holders or transferors. - The hacker's goal was to obtain high value crypto targets. This has various potential use cases in the cyber criminal world, such as online social engineering, conducting IRL robberies, reselling the information to other criminal groups, or blackmailing Revolut directly. - The hacker says that any individual can "buy themselves" out of the data leaks. He will be publishing the ransom note without 24 hours outlining his demands from Revolut. We do not currently know what amount he will be demanding. - We asked the hacker if he feels bad about what he did and the effects this will have on victims and their privacy. His reply was: "If the ransom is not paid, then the data will be sold, and their blood will be on Revolut's hands, not mine." - A member of the hacking group known as "Smilik" had a falling out with Villain. They splintered into two channels, each one claiming to be the hacker. Smilik was unable to provide our team with sufficient evidence proving he was the original hacker. Villain provided videos, original emails with attachments, and proof that he had originally sent a subset of files to Smilik. We are satisfied that Villain is the original hacker and that his narrative is consistent. - The hacker will be contacting other journalists and investigation groups today to release the same information, allowing for the existence of the files and authenticity of the emails to be independently corroborated - Our team is under the impression that this is an amateur group that got lucky due to Revolut's lack of checks and continued incompetence over several months. This does not seem to be a professionally organized hacking group. - The partial files sent to us contained details of a famous Swedish singer and Idol finalist, a prominent Armenian academic, an Indian cricket star, and several founders and CEOs. To balance public disclosure with user privacy, our team redacted every piece of personal information from the original video before publication. We have also deleted the original information from our end. - Our understanding is that the files sent to us were just one of dozens. Each file, which comes with full banking and transaction history, would allow hackers to establish the target's daily spending patterns, location data, people they send money to (likely family, employees, or other close contacts) and more, leading to highly damaging personal disclosures. We are releasing this information in the interest of public transparency. The breach is real, and Revolut was not forthcoming enough about it in enough time. We hope Revolut takes all legal and necessary steps available to them to prevent this data from being either publicly released or sold to criminal groups, as it would be highly damaging and disastrous for victims involved. This is most of what we have for now. We'll keep an eye for any further updates, including when the ransom demand comes out.