Revolut Data Breach Group Demands $3M in Monero, Threatens Data Sale

The group behind an alleged Revolut data breach has given the company 24 hours to pay $3 million in Monero (XMR), warning that it will sell the stolen customer information to other criminal groups if the demand is not met. The attackers said they specifically targeted customers believed to hold substantial amounts of cryptocurrency.

On Wednesday, the group, which identifies itself as “iamnotavillain,” demanded 6,000 XMR and posted a countdown timer, according to the Financial Times.

Revolut said it has not been contacted directly by the people or group making the claims. “Revolut has not received any direct contact or demand from the individuals or group making these claims,” a company spokesperson told CoinDesk.

The alleged breach affected at least 680 Revolut customer accounts, the FT reported.

According to the hackers, blockchain analysis was used to identify Revolut accounts linked to customers with significant crypto holdings. The group also provided the FT with a 60-second screen recording that purportedly displayed some of the information it had obtained.

The footage reportedly showed sensitive customer information, including passports, driver’s licenses, photographs submitted for know-your-customer checks and transaction records.

The incident reportedly began when attackers impersonated government officials and submitted information requests that successfully passed Revolut’s verification procedures. The company provided customer records before later determining that the requests were fraudulent, according to notices previously sent to affected users.

Revolut previously told CoinDesk that it had blocked the address associated with the fraudulent requests and informed the appropriate government agency, law enforcement authorities and regulators. The company also said its internal systems and customer funds were not affected.

The hackers told the FT that no negotiations with Revolut had taken place as of the time of publication.