Revolut faces $3 million ransom threat after customer data breach

Traders Union
All News
Financial News
Revolut data breach ransom

Highlights

Hackers demand 6,000 XMR (about $3 million) from Revolut after claiming to access sensitive customer data, including IDs and transaction histories.
At least 680 Revolut customer accounts are impacted, with hackers allegedly gaining access by posing as law enforcement using a compromised Italian government email system.
The breach underscores growing compliance and reputational risks for digital financial firms like Revolut, which recently reached a $115 billion valuation.

Ransom demand and alleged data cache

As first reported by the Financial Times, the group calling itself iamnotavillain posts its ultimatum online on Wednesday afternoon alongside a digital countdown clock and demands 6,000 XMR, or about $3 million. The hackers tell the Financial Times they are using the website to make such demands for the first time and say there have not yet been negotiations with Revolut.

The message warns that unless payment is made, the data will be sold to other criminal groups. A 60-second screen-capture video sent to the Financial Times appears to show access to purported Revolut documents, including customers' driving licences, passports, identity pictures used for know your customer checks and transaction histories.

Revolut declines to comment on the purported ransom demand. The bank previously says it is providing affected customers with immediate support and working closely with relevant law enforcement and regulatory authorities.

Operational and sector implications

The breach is understood to affect at least 680 customer accounts. The hackers reportedly obtain the files by compromising an Italian government email system and then posing as law enforcement over several months to request information on specific Revolut client accounts.

The group says it selects targets through blockchain analysis to identify Revolut accounts with significant crypto holdings. Several affected customers express concern that their personal data is compromised through the alleged scheme.

Founded in 2015, Revolut has grown into Europe's biggest fintech, operating as a bank in more than 30 countries and recently reaching a $115 billion valuation in a secondary share sale. The episode highlights rising compliance and reputational risks for digital financial groups handling identity verification records and crypto-linked customer activity.

AI-enabled cyberattacks are accelerating in both speed and scale, reinforcing expectations of higher spending on cybersecurity tools and services. Our earlier article noted that companies are also expanding protection efforts beyond traditional networks to secure AI models, applications, and infrastructure as this segment of the defense market grows rapidly.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.