Hackers Demand $3 Million from Revolut Amid Data Breach Threat

Hackers claiming to have breached the digital bank Revolut have issued a ransom demand of $3 million, threatening to sell confidential information belonging to hundreds of customers. The group, which identifies itself as iamnotavillain, made the demand public on their website, complete with a countdown timer for the payment deadline.

This public approach is atypical for hackers, who usually prefer to negotiate privately and only disclose their actions if their targets refuse to comply. The group has demanded payment in Monero, a cryptocurrency known for its anonymity, stating that failure to pay would result in the sale of the data, with the warning that "the blood will be on your hands."

In communications with the Financial Times via Telegram, the hackers indicated that they had not yet engaged in negotiations with Revolut and provided screenshots of some of the data they claim to have obtained, although much of it was redacted. They also shared a video showing an unidentified individual browsing files that allegedly originated from Revolut, which included sensitive documents such as driving licenses, passports, and transaction histories. The breach is believed to have affected at least 680 customer accounts.

The hackers reportedly gained access to this sensitive information by breaching an Italian government email system, posing as law enforcement officials to request details about specific Revolut accounts over several months. They claimed to have targeted accounts with significant cryptocurrency holdings, using blockchain analysis to identify potential victims.

Revolut's Response to Ransom Demand

In response to the ransom demand, Revolut stated that it had not received any direct communication from the hackers and emphasized that it is providing immediate support to customers who may be affected. The company is also working closely with law enforcement and regulatory authorities to address the situation.

Since its inception in 2015, Revolut has rapidly expanded to become one of Europe's largest financial technology firms, operating in over 30 countries and serving around 80 million customers. Its valuation recently reached $115 billion following a secondary share sale.

Cleared for Release

As the situation unfolds, several Revolut customers have expressed anxiety over the potential compromise of their personal data. The company has reassured its customers that it is taking the matter seriously and is actively working to mitigate any risks associated with the breach. The incident highlights ongoing concerns regarding cybersecurity in the financial sector, particularly as digital banking continues to grow in popularity.

The demand for a ransom in this case underscores the evolving tactics used by cybercriminals. As financial institutions increasingly rely on digital platforms, the importance of robust cybersecurity measures becomes paramount. Revolut's response and the ongoing investigation will be closely monitored by both customers and industry experts alike.