Group behind Revolut data breach demands $3 million in Monero, threaten to sell customer data
Reported by CoinDesk · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Hackers demanding $3 million in Monero (XMR) have threatened to sell stolen customer data from Revolut if their ransom is not paid within 24 hours. The group, calling itself "iamnotavillain," has leaked at least 680 customer accounts affected by the breach, including identity documents and transaction histories. They used blockchain analysis to identify Revolut accounts with significant crypto holdings.
Why it matters
The source indicates this matter is significant because the hackers are threatening to sell sensitive customer data to other criminal groups, which could lead to further criminal activity and privacy violations. The extent of the breach and the use of blockchain analysis to select targets highlight vulnerabilities in customer data protection. The source does not explain broader market or policy impacts.
Key context
The breach involved attackers impersonating government officials to fraudulently obtain customer records from Revolut. The company reportedly complied with these requests before realizing they were fake. Revolut stated it blocked the address used in the requests and informed the relevant authorities. The company also claimed its systems and customer funds were not affected.
Key numbers and entities
The hackers demanded 6,000 Monero (approximately $3 million). At least 680 customer accounts were affected. The hacking group is named "iamnotavillain." Revolut is the targeted financial services company. The Financial Times and CoinDesk are cited as sources.
What remains unclear
Details about how Revolut’s internal security allowed the fraudulent information requests to pass checks remain unspecified. The current status of negotiations or responses from Revolut beyond refusing comment is also unclear. The exact extent of the data compromise and whether further accounts were impacted is not established.