A hacking group has threatened Revolut with a $3 million ransom in Monero, claiming to have stolen sensitive customer data from over 680 accounts.
A hacking group has issued a ransom demand of $3 million in Monero (XMR) from Revolut, threatening to sell stolen customer data if their ultimatum is not met within 24 hours.
The attack has reportedly compromised sensitive information from over 680 accounts.
Identifying themselves as "iamnotavillain," the hackers revealed their demands along with a countdown timer, requesting the equivalent of 6,000 XMR, a cryptocurrency noted for its privacy features.
The data breach has affected at least 680 customer accounts, exposing sensitive information like identity documents and transaction histories. The attackers utilized blockchain analysis to identify accounts with substantial cryptocurrency holdings, focusing their efforts on these targets.
In communication with the Financial Times, the hackers shared a video that displayed some of the sensitive data they obtained, which included passports and driving licenses.
This breach followed a series of fraudulent requests made by the hackers, who impersonated government officials to gain access to customer information. Revolut initially complied with these requests before realizing they were illegitimate, as confirmed in prior notifications sent to affected customers.
In response to the breach, Revolut has blocked the IP address linked to the fraudulent requests and has notified the appropriate government authorities and law enforcement agencies. The company maintains that its systems and customer funds continue to be secure.
As of the latest reports, no negotiations have occurred between the hackers and Revolut, and the company has not commented on the situation.
