Hackers responsible for a data breach at Revolut are demanding $3 million worth of monero (XMR) within 24 hours, threatening to sell stolen customer data to other criminal groups if the bank fails to pay. The group, calling itself “iamnotavillain,” issued the demand on Wednesday alongside a countdown clock, requesting 6,000 XMR.
According to reports, at least 680 Revolut customer accounts were impacted by the breach. The hackers stated that they used blockchain analysis to pinpoint Revolut accounts holding significant amounts of cryptocurrency.
To support their claims, the group provided a 60-second screen recording appearing to display a portion of the acquired data. The video reportedly featured passports, driver's licenses, know-your-customer verification photos, and transaction histories.
The security incident originated after attackers impersonated government officials and submitted information requests that successfully bypassed Revolut's checks, leading the company to hand over customer records before realizing the inquiries were fraudulent. Revolut previously stated that it blocked the address associated with the requests, notified the relevant government agency, law enforcement, and regulators, and confirmed that its core systems and customer funds remained unaffected.
At the time of publication, the hackers reported that no negotiations had taken place with Revolut, and the company did not respond to requests for comment.
