Revolut hit with $3M ransom demand after breach

Attackers taking responsibility for the Revolut data breach are demanding $3 million in Monero from the banking firm. If the ransom is not paid, they threaten to sell the stolen customer data to other criminals.

The Financial Times reported this, noting the group calls itself “iamnotavillain” and has issued its demand publicly for the first time.

A ransom website was set up this week, but negotiations with Revolut have not started.

According to Reuters, Revolut has not been contacted by the attackers and has not received any ransom demands.

Coin Bureau earlier reported a demand of 10,000 BTC, which would be worth more than $760 million at current prices. Whether that came from a different group is unknown.

The usernames behind that supposed demand were never disclosed by Coin Bureau.

Revolut deceived using Italian government email

The attackers allegedly gained access to an Italian government email address and used it to breach Revolut's systems.

Posing as law enforcement, they bypassed Revolut's security checks and extracted data from several customer accounts.

A source told Reuters that roughly 680 customers were impacted, and the attack did not affect Revolut's core infrastructure, databases, or customer accounts.

Earlier in September, Trezor, a hardware wallet company, disclosed that 80,000 users had their data exposed in a mailing breach.

LastPass, a password manager, also had a customer data leak in June. Researchers say India's state-owned Bank of Baroda suffered a similar leak in July.