Revolut breach affects 680 accounts; hackers demand $3M in Monero and threaten to sell customer KYC data within 24 hours.
Regulation & Gov ·
Hackers operating under the name "iamnotavillain" have demanded 6,000 XMR—valued at approximately $3 million—from Revolut, threatening to sell stolen customer data to other criminal organizations unless the payment arrives within 24 hours. The breach compromised at least 680 accounts, according to the attackers' claims.
The threat actors report using blockchain analysis to identify and target customers with significant cryptocurrency holdings. They state they obtained sensitive personal documents including passports, driver's licenses, KYC photographs, and transaction histories by impersonating government officials to Revolut staff or customers.
The timeline and operational details of the breach remain unclear—specifically, when the unauthorized access occurred, whether Revolut has confirmed the incident publicly, and whether customers have been notified. The credibility of the attackers' claims and the actual contents of any stolen data are also unverified at this stage.