Revolut attackers have started posting stolen customer IDs and selfies online, threatening to continue leaking more data if ransom is not paid.