Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

A threat actor demanding $3 million from Revolut says fake government legal requests yielded data of about 680 customers, mostly cryptocurrency whales.

Hackers used an infostealer-compromised government employee's email account to send fraudulent legal requests to Revolut Bank UAB in Lithuania for roughly five months, obtaining personal and financial data. Threat actor 'IAmNotAVillain' publicly demanded $3 million, though Revolut says it received no direct demand; the compromised data of approximately 680 high-profile customers, reportedly crypto whales, includes passports, phone numbers, and financial information. The actor also claims the theft of over 147GB of data from Italy's Interior Ministry (pec.interno.it), which is under police investigation. Hudson Rock says it knows of more than 300 compromised credentials tied to pec.interno.it, suggesting existing infostealer logs were used rather than fresh infections.