Revolut hackers demand $3M Monero, threaten data sale

6.6 Security

Sep 17, 2026

Hackers demand $3M in Monero from Revolut after breaching 680 accounts, threatening to sell sensitive data. They targeted high-value crypto users using blockchain analysis.

A group calling itself "iamnotavillain" has demanded a ransom of 6,000 Monero (XMR), worth about $3 million, from Revolut after a data breach impacting at least 680 customers. The hackers issued a 24-hour ultimatum, threatening to sell stolen customer data—including identity documents, transaction histories, and banking records—to criminal groups if the ransom is not paid. Their demand was posted online with a countdown clock. The attackers claim they used blockchain analysis to identify Revolut accounts with significant cryptocurrency holdings, specifically targeting high-value users in multiple countries. Some reports suggest the breach was enabled by a fraudulent information request from a compromised government domain. Revolut stated it has not received direct communication from the group and confirmed its core infrastructure and primary databases were not accessed. European authorities are investigating, underscoring the increasing use of privacy-focused cryptocurrencies in cyber extortion.