Hackers Exploit Italian Government Email to Target Revolut Users in Data Breach

In a significant data breach, hackers hijacked a legitimate email address from Italy's Ministry of Interior to impersonate law enforcement and extract personal information from Revolut, a London-based fintech company. The breach, which occurred around September 11-12, has left approximately 700 customers vulnerable as their identity documents, passports, selfies, IBANs, and Bitcoin transaction histories were exposed.

The attackers, who identified themselves as "I Am Not A Villain" on Telegram, sent fraudulent emergency data requests to Revolut, exploiting the trust that companies place in official-looking communications. Revolut complied with the requests without realizing the legitimacy of the emails was compromised, leading to the unauthorized release of sensitive customer data.

Following the breach, the hackers initiated an extortion campaign, demanding a ransom of 10,000 Bitcoin from the affected users. Investigations are currently underway in Italy and the UK, focusing on the methods used to compromise the email account and the adequacy of Revolut's data handling practices.

Revolut has confirmed that its internal systems were not breached and that customer funds remain secure. The company promptly blocked the compromised email account and notified the relevant authorities and affected users.