Revolut has not received any direct contact from individuals or groups making public ransom demands following a customer data breach, the company stated Thursday.
A group calling itself "IAmNotAVillain" publicly demanded 6,000 Monero, valued at approximately $3 million, within 24 hours and threatened to sell customer records to other criminal groups, according to reporting by the Financial Times.
Multiple competing claims complicate the picture
The lack of direct contact adds to confusion about who controls the stolen data, as multiple groups have claimed responsibility for the breach. An earlier group calling itself "Revolut Smilik" demanded 10,000 Bitcoin, worth about $780 million at the time. IAmNotAVillain disputed this competing claim on its website, alleging that a former associate had received only a sample of the data before taking credit for the breach.
A third website, revoloot.lol, has also been associated with another actor claiming responsibility, further complicating efforts to establish who possesses the customer records.
Italian authorities expand investigation
Italy's National Anti-Mafia and Anti-Terrorism Directorate is now involved in the investigation due to a suspected government entity breach. Prosecutors in Reggio Calabria have opened an investigation into unauthorized computer system access, while investigators determine whether an institutional email account was breached or cloned.
Italy's privacy regulator has separately asked banks to urgently review their access security systems and is examining whether other financial institutions may have been affected.
