Hackers Demand $3 Million in Monero From Revolut, Threaten to Leak Customer Data

A hacking group is demanding $3 million worth of monero from digital bank Revolut within 24 hours, threatening to sell stolen customer data to other criminals if the payment isn’t made.

The Demand and What Was Stolen

The group, calling itself “iamnotavillain,” posted its ransom demand Wednesday alongside a countdown clock, asking for 6,000 XMR, a cryptocurrency built to hide transaction details, according to the Financial Times. At least 680 Revolut customer accounts were reportedly affected. The hackers said they picked their targets by using blockchain analysis to identify Revolut accounts holding significant amounts of crypto. To back up their claims, the group sent the Financial Times a short screen recording appearing to show stolen passports, driving licenses, KYC verification photos and transaction histories.

How The Breach Happened

According to notices Revolut previously sent to affected customers, the breach occurred after attackers impersonated government officials and submitted information requests that managed to pass the company’s internal checks. Revolut handed over customer records before realizing the requests were fraudulent.

The company has said it blocked the address used in the scheme and alerted the relevant government agency, law enforcement and regulators, adding that its systems and customer funds remained unaffected. As of the report, the hackers said no negotiations with Revolut had taken place, and the company did not respond to requests for comment.