Revolut Reports No Ransom Demand Following Data Breach Incident

Revolut has stated that it has not been in contact with the group claiming responsibility for a recent data breach and has not received any ransom demands. According to a spokesperson cited by Reuters, the breach involved the unauthorized sharing of personal and financial records, including Bitcoin transaction histories, following a fraudulent government request.

The compromised data reportedly includes identity documents, contact information, IBANs, and account records. Onchain investigator ZachXBT noted that the breach seemed to target high-net-worth individuals but was likely limited in scope, affecting approximately 680 customers.

Earlier reports indicated that the attackers, identifying themselves as “iamnotavillain,” had demanded $3 million in Monero, threatening to sell the stolen data to other criminal organizations. However, Revolut has confirmed that its core infrastructure and customer accounts remain secure and unaffected by the breach.

The attackers gained access to Revolut's data by posing as law enforcement using an Italian government email, which allowed them to bypass security measures. Despite the ransom demand, there have been no negotiations between the attackers and Revolut, as reported by the Financial Times.