Hackers claiming responsibility for a Revolut data breach are demanding a $3 million ransom in Monero (XMR) and have given the fintech firm 24 hours to pay. The group says it will sell the stolen customer data to other criminals if Revolut refuses to pay.
Meanwhile, the Revolut team stated that the company had never received a direct extortion demand from the cybercriminals.
The group, calling itself “iamnotavillain,” posted the ransom demand, asking Revolut to pay 6,000 XMR, worth around $3 million. The hackers reportedly set a 24-hour deadline and threatened to sell the information if the payment is not made.
“The blood will be on Revolut’s hands.”
The hackers sent the FT a 60 second recording that appeared to show some of the stolen information. The exposed data reportedly includes passports, driving licences, KYC photos and transaction histories, including crypto transaction records.
Even the former Mt. Gox CEO Mark Karpeles has also said he was among customers notified about the incident.
The breach did not involve a direct attack on Revolut’s servers. Instead, hackers used fake identities and social engineering to trick the company.
The attackers reportedly accessed an email account linked to an Italian government agency and used it to send fake European Investigation Orders to Revolut.
Since the requests appeared to come from law enforcement officials, they passed Revolut’s checks. The company then unknowingly shared customer information before finding out that the requests were fake.
At least 680 customer accounts were reportedly affected by the breach. Most of the targeted customers are in Switzerland and France, with others in the UK and Germany.
Revolut said it has not negotiated with the hackers and has not paid any ransom. The company also said it never received a direct ransom demand from the attackers.
The $3 million Monero (XMR) demand and 24-hour deadline were posted publicly on a new website by the hacker group. The group said that it chose to publish the threat online instead of contacting Revolut directly.
This means there have been no ransom talks between the hackers and Revolut.
The company is instead focused on containing the incident, working with law enforcement and supporting affected customers.
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
All opinions and insights shared represent the author's own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
The Federal Open Market Committee (FOMC) kicked off a high stakes closed door meeting on…
ONDO is approaching a critical support zone just as Ondo Finance expands its tokenized stock…
PEPE is testing buyers' patience. The meme coin has climbed along an upward trendline since…
Ripple has won final approval from the US Office of the Comptroller of the Currency…
Artificial intelligence needs more than clever algorithms. It needs GPUs, electricity, data centers, and plenty…
The Worldcoin price continues to slide even as Bitcoin recovers above $80,000 and the broader…
