Revolut Data Breach Linked to Compromised Italian Government Email

• •Hackers impersonated Italian law enforcement to obtain sensitive data from Revolut.
• •Approximately 680 customers had their personal information exposed, including identity documents and banking details.
• •The attack exploited a compromised Italian government email account, raising concerns about government cybersecurity.

A significant data breach at Revolut involved hackers impersonating Italian law enforcement to obtain sensitive customer information. The attackers exploited a compromised Italian government email account, specifically from the pec.interno.it domain, to submit fraudulent requests for data. Approximately 680 customers were affected, with data including identity documents, banking information, and transaction histories being exposed. Revolut confirmed that its systems were not breached and that the requests appeared legitimate due to the email domain's authenticity. The attackers, identified as the group 'IAmNotAVillain', claimed to have maintained access to the compromised email account for about six months. The incident raises serious concerns about the security of government email systems and the potential for similar attacks in the future. Revolut has since alerted affected customers and blocked the fraudulent email address. Investigations are ongoing, and the incident has drawn attention from various regulatory bodies.