Hackers Target Revolut Customers via Blockchain Scan

The update

A group calling itself IAmNotAVillain has demanded $3 million in Monero from Revolut within 24 hours, threatening to sell customer data if the payment isn’t made. The hackers claim they targeted customers with significant crypto holdings by analyzing blockchain activity. Revolut states it has received no direct contact from the hackers despite the public demand. Multiple groups have claimed responsibility for the breach, with another demanding 10,000 Bitcoin, though these competing claims remain unresolved.

Why it matters

This incident highlights how blockchain transparency can be exploited to identify high-value targets, creating a new vulnerability for crypto-friendly financial services. The breach affects at least 680 customers whose personal and financial data was stolen through what Revolut describes as a sophisticated impersonation scam using a compromised Italian government email system. The use of Monero, a privacy coin, adds complexity to tracking potential ransom payments.

What to watch

Italian authorities have widened their investigation, with the National Anti-Mafia and Anti-Terrorism Directorate now involved due to the government entity’s suspected role. Revolut has not received any direct contact from the individuals or group making these claims.

Sources

• decrypt.co — Details on the ransom demand and blockchain targeting method
• cointelegraph.com — Revolut's statement about no direct contact from hackers
• coindesk.com — Information about the 24-hour deadline and customer targeting