Revolut Faces $3 Million Ransom Demand from Hackers

Hacker Group Demands Ransom from Revolut

A hacking group known as iamnotavillain has issued a ransom demand of 6,000 Monero (approximately $3 million) to Revolut, threatening to sell sensitive customer data if their demands are not met within 24 hours. The group claims to have used blockchain analysis to identify Revolut accounts with significant cryptocurrency assets.

In a statement, Revolut denied having any direct communication with the hackers or receiving any ransom requests. The company emphasized that the number of affected customers is limited and assured that its funds and systems remain secure.

Details of the Breach

The hackers reportedly gained access to Revolut's data by responding to requests that appeared to originate from a legitimate government email, which was later found to be part of an impersonation scam. This incident, characterized by Revolut as a "sophisticated external impersonation scam," affected at least 680 accounts, with stolen data including names, birthdates, job titles, and sensitive identification documents.

The breach appears to have targeted high-net-worth individuals, raising concerns about potential violent attacks against cryptocurrency holders. Blockchain investigator ZachXBT highlighted that the hackers' methodical approach corroborates their claims of selecting targets based on substantial holdings.

Monero, known for its privacy features, is favored by extortionists for ransom payments, although Bitcoin remains the preferred choice due to its liquidity. The hackers have warned that failure to comply with their demands will result in the sale of the stolen data, stating ominously, "the blood will be on your hands."