Back Moomoo

Revolut Hackers Demand $3 Million in Monero, Threaten to Sell Customer Data

Moomoo • September 16, 2026

The hackers behind a data breach at Revolut are demanding $3 million worth of monero (XMR) within 24 hours, threatening to sell the stolen customer data to other criminal groups if the bank refuses to pay, according to the Financial Times.

The group, which calls itself "iamnotavillain," posted the demand Wednesday alongside a countdown clock, the FT reported. It asked Revolut to send 6,000 XMR, a cryptocurrency designed to obscure transaction details.

At least 680 Revolut customer accounts were affected by the breach, according to the report.

The hackers told the FT they chose their targets using blockchain analysis to find Revolut accounts with significant crypto holdings.

The group sent the FT a 60-second screen recording that appeared to show some of the data it obtained. The video included passports, driving licences, photos used for know-your-customer checks and transaction histories, according to the newspaper.

The breach came after attackers posed as government officials and sent requests for information that passed Revolut's checks. Revolut handed over customer records before discovering the requests were fraudulent, according to notices previously sent to affected customers.

Revolut previously told CoinDesk that it blocked the address used in the requests and notified the relevant government agency, law enforcement and regulators. The company said its systems and customer funds were unaffected.

The hackers told the FT there had been no negotiations with Revolut at the time of publication.

Revolut did not respond to CoinDesk's request for by publication.

[FOMC Reaction] KPMG's Swank warns of risk of more rate hikes Jiji Press · 39m

Morning Equity Notes – September 17, Part 2 Jiji Press · 11m

Latrobe Magnesium Secures Option to Expand Ferronickel Supply Deal for US Magnesium Plant MT Newswires · 25m

Matinas BioPharma Board Approves 1-For-15 Reverse Stock Split Effective September 28, 2026 Benzinga · 21:25

XTEND AI Robotics Selected As Top Performer In U.S. Department Of War's $1B Drone Dominance Program Gauntlet II Following Delivery A… Benzinga · 21:27

Use the button in your browser to the page with your friends

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Revolut Data Breach Linked to Compromised Italian Government Email A significant data breach at Revolut involved hackers impersonating Italian law enforcement to obtain sensitive customer information. The attackers exploited a compromised Italian government email account, specifically from the pec.interno.it domain, to submit fraudulent requests for data. Approximately 680 customers were affected, with data including identity documents, banking information, and transaction histories being exposed. Revolut confirmed that its systems were not breached and that the requests appeared legitimate due to the email domain's authenticity. The attackers, identified as the group 'IAmNotAVillain', claimed to have maintained access to the compromised email account for about six months. The incident raises serious concerns about the security of government email systems and the potential for similar attacks in the future. Revolut has since alerted affected customers and blocked the fraudulent email address. Investigations are ongoing, and the incident has drawn attention from various regulatory bodies. 42 sources 68

Extracted Entities

Revolut Hackers Demand $3 Million in Monero, Threaten to Sell Customer Data

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Industries (1)