Revolut Hackers Demand $3M Monero Ransom, Threaten to Sell Customer Data: Report
Summary
A criminal group has demanded 6,000 XMR, worth approximately $3 million, from Revolut within 24 hours or it will sell hundreds of customers' identity documents and transaction records. The group, calling itself iamnotavillain, claims to have used blockchain analysis to identify Revolut users with substantial crypto holdings. The hackers allege they stole the data by impersonating a government agency, exploiting a compromised Italian email system over several months. Revolut has confirmed the breach involved at least 680 accounts and has described the incident as a sophisticated external impersonation scam. The company stated it has not received any direct contact or demand from the group and that its funds and systems remain untouched.
Key points
- The extortion group posted its demand on a dedicated website, warning that data will be sold if the payment is not made.
- The stolen data includes names, dates of birth, home addresses, passport copies, selfies for verification, account statements, and full transaction histories.
- The attackers used a compromised Italian government email system to send requests for information over a period of months.
- Revolut has characterized the incident as a targeted attack on high net worth users, aligning with the group's description of its victims.
- The group has threatened to sell the data to other criminals, citing the combination of verified identity and proven holdings as the profile behind rising wrench attacks on crypto owners.
Timeline
Extortion group demands $3M in Monero from Revolut.
Hackers sent information requests via a compromised Italian government email system.
“"all the data will be sold, and the blood will be on your hands."”
Background
The group claims to have used blockchain analysis to identify Revolut customers with large crypto holdings before targeting them.
Why it matters
The breach exposes sensitive personal and financial information, raising significant risks for the affected customers.
What's next
Revolut has stated it has not received any direct contact from the group, leaving the outcome of the 24-hour ultimatum uncertain.