Attackers calling themselves Revolut Smilik obtained data relating to 680 Revolut customers through fraudulent government information requests and demanded 10,000 Bitcoin after publishing purported records on Telegram. The exposed material included passport details, bank account numbers, addresses, identity-verification images, financial records and Bitcoin transaction histories, while the attackers threatened continued daily disclosures unless paid. Revolut said an unauthorized party impersonated a government agency using an email account on the agency's real domain that passed technical authentication checks. The company blocked the account, notified affected customers and regulators, and self-reported the incident to the UK Information Commissioner's Office, which opened a formal investigation. The breach comes as Revolut prepares for a public offering projected at about $200 billion, compared with its latest private valuation of $75 billion.