On Thursday, September 17, 2026, TipRanks reported that a hacker group calling itself “iamnotavillain” is demanding $3 million in Monero from fintech company Revolut after allegedly stealing sensitive customer data, including passport copies, home addresses, and bank records.
The group gave Revolut a 24-hour deadline, issued Wednesday, and threatened to sell the stolen data to other criminals if the ransom is not paid. The demand was posted on a website created by the hackers, who requested payment in Monero, a privacy-focused cryptocurrency that obscures transaction details and is frequently used in illicit demands.
According to reports, the attackers first conducted on-chain analysis to identify Revolut users holding significant cryptocurrency balances. They then targeted those accounts specifically, gaining access to full transaction histories and home addresses for approximately 680 users.
The breach reportedly did not stem from a direct hack of Revolut’s systems, but from a social engineering scheme. Cybercriminals used a compromised, legitimate Italian government email account to send fraudulent requests for customer information over a period of months. Revolut employees, trusting the official government domain, complied and turned over sensitive files, including identification photos, bank statements, and crypto trading records.
Crypto investigator ZachXBT was the first to publicize the leak, noting that the attack specifically targeted wealthy crypto holders. The combination of exposed home addresses and confirmed crypto holdings has raised concerns about physical safety risks for affected users.
Revolut said Wednesday evening that it had not received any direct ransom message from the hackers and maintained that its core systems and customer funds remain secure. The company said the leak impacted a small number of users and that it is continuing efforts to protect customer safety, though it has declined to identify the government agency whose email system was compromised.
The incident comes as Revolut’s private market valuation recently reached $115 billion, surpassing several traditional UK banks in value.
Source: TipRanks
Be the first to comment