Revolut Denies Direct Contact Amid $3 Million Ransom Demand

Revolut has confirmed that it has not received any direct contact from individuals or groups claiming responsibility for a data breach that has resulted in ransom demands. The company reported this on Thursday, amidst claims from a group identifying itself as "IAmNotAVillain," which has publicly demanded 6,000 Monero, equivalent to approximately $3 million, threatening to sell customer records to other criminal organizations.

A spokesperson for Revolut stated that there has been no direct communication regarding these ransom demands. This situation adds to the uncertainty surrounding the breach, as "IAmNotAVillain" is not the only group asserting responsibility. An earlier demand was made by a group called "Revolut Smilik," which sought a staggering 10,000 Bitcoin, valued at around $780 million at the time.

The public ultimatum from "IAmNotAVillain" follows Revolut's disclosure of the data breach last week, prompting Italian authorities to expand their investigation. Reports indicate that a government email account may have been exploited to access customer data, raising concerns about the security of sensitive information.

In a statement, "IAmNotAVillain" refuted the competing claim from "Revolut Smilik," alleging that a former associate had only obtained a small sample of the data before taking credit for the breach. The group's website, iamnotavillain.xyz, was inaccessible at the time of this report, further complicating the situation.

Confusion Over Multiple Claimants Emerges

Additionally, another website, revoloot.lol, has been flagged by cybersecurity experts as being linked to a different actor claiming responsibility for the breach. This has led to increased confusion regarding the true identity of those behind the ransom demands.

Case Closed

Italy's National Anti-Mafia and Anti-Terrorism Directorate has become involved due to the implications of the breach concerning a government entity. Prosecutors in Reggio Calabria have initiated an investigation into unauthorized access to a computer system of public interest, focusing on whether the institutional email account was compromised or cloned.

In response to the breach, Italy's privacy regulator has urged banks to conduct urgent reviews of their security systems and is investigating potential involvement from other financial institutions. The ongoing developments highlight the critical need for enhanced cybersecurity measures in the financial sector.