A $780 Million Ransom and 153 Million Exposed Licenses — With Regulators Silent

Hackers have issued a $780 million Bitcoin ransom demand against Revolut, the fintech serving 231 million customers, following a breach that reportedly exposed customer data including transaction histories, personal identification details, and partial payment information. The demand is unusually large even by the escalating standards of ransomware: prior large-scale demands against financial institutions had ranged from roughly $50 million to $100 million. Revolut has not confirmed whether negotiations are underway, though the company faces significant legal exposure under strict EU and UK data breach notification requirements independent of any ransom resolution.

A separate and in some respects more alarming breach involves 153 million driver's licenses — one of the largest exposures of government-issued identity documents in U.S. history — that occurred two weeks ago and has been met with complete public silence from regulators. No federal agency has issued guidance for affected individuals. No state agency has taken public responsibility. Driver's license data is particularly dangerous as a breach target because it functions as an identity anchor in financial and medical contexts: unlike passwords, birthdates and license numbers cannot be reset.

Relevant oversight spans multiple agencies — state DMVs, the FTC on consumer protection grounds, and CISA on critical infrastructure grounds — and none has issued public communication. In the absence of official guidance, affected individuals are left to initiate credit freezes through Equifax, Experian, and TransUnion on their own initiative, placing the burden of response entirely on the people who were harmed by a systemic failure.