Back Ksl

Revolut hackers demand $3 million ransom, FT reports

Ksl • September 16, 2026

FILE PHOTO: Revolut logo is seen in this illustration taken July 29, 2024. (REUTERS/Dado Ruvic/Illustration/File Photo)

Estimated read time: Less than a minute

Sept 16 — Revolut has had no direct or demand from the individuals or group claiming responsibility for a data breach, a company spokesperson ‌told Reuters on Wednesday.

The Financial Times reported that attackers claiming ⁠responsibility for a data breach at the ⁠company had threatened to sell confidential records of ‌hundreds of ‌customers to other criminal groups unless Revolut paid ⁠a $3 million ransom within ⁠24 hours.

Here are some details:

• Revolut's core infrastructure, databases and customer accounts were not hacked, a source familiar with the matter said.

• The breach is understood to have affected ‌ 680 customers, according to the source.

• The group, which calls itself iamnotavillain, published the ultimatum online on Wednesday afternoon to a digital countdown clock, the FT report said.

• The group told the newspaper it was using the website to make its demands for the first time and that ‌there had not ‌been ⁠any negotiations with Revolut.

• Revolut said on Saturday that sensitive customer information was disclosed to an unauthorized third party after it received fraudulent ‌requests from a legitimate government agency email domain.

(Reporting ‌by Gnaneshwar Rajan ⁠and Preetika Parashuraman in Bengaluru; Editing by Vijay Kishore and Tasim Zahid)

Most recent Science stories

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Revolut Data Breach Linked to Compromised Italian Government Email A significant data breach at Revolut involved hackers impersonating Italian law enforcement to obtain sensitive customer information. The attackers exploited a compromised Italian government email account, specifically from the pec.interno.it domain, to submit fraudulent requests for data. Approximately 680 customers were affected, with data including identity documents, banking information, and transaction histories being exposed. Revolut confirmed that its systems were not breached and that the requests appeared legitimate due to the email domain's authenticity. The attackers, identified as the group 'IAmNotAVillain', claimed to have maintained access to the compromised email account for about six months. The incident raises serious concerns about the security of government email systems and the potential for similar attacks in the future. Revolut has since alerted affected customers and blocked the fraudulent email address. Investigations are ongoing, and the incident has drawn attention from various regulatory bodies. 42 sources 68

Extracted Entities

Revolut hackers demand $3 million ransom, FT reports

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)