Revolut Given 24-Hour Ultimatum: Attackers Demand 6,000 Monero for Data of at Least 680 Accounts

Revolut attackers have demanded 6,000 Monero within 24 hours, threatening to sell the data of at least 680 accounts.

According to a report by the Financial Times, the group identifying itself as “iamnotavillain” demanded 6,000 Monero (XMR), worth approximately $3 million, from Revolut. The attackers stated that if their demands are not met, they will sell the allegedly compromised customer data to other criminal groups.

The group published its demand on Wednesday along with a countdown timer. While it was reported that at least 680 Revolut accounts were affected by the data breach, the attackers said they selected their targets using blockchain analysis to find accounts with significant crypto asset balances.

A 60-second screen recording sent by the attackers to the Financial Times reportedly showed some of the customer data they claim to have obtained.

Customer Data Visible in Screen Recording

The recording reportedly included passports, driver’s licenses, identity verification photos, and transaction histories.

The breach allegedly occurred when individuals posing as government officials sent information requests. Revolut stated in previous notifications to affected customers that these requests passed through controls but were later discovered to be fraudulent.

Revolut had previously announced that it blocked the relevant address and informed the competent authorities and law enforcement. The company stated that its systems and customer funds were not affected. At the time of publication, it was reported that there were no negotiations between the attackers and Revolut, and the company did not respond to CoinDesk’s request for comment.