Hackers demanded $3 million from Revolut, threatening to sell customer data

Hackers of the group iamnotavillain, who stole personal data of customers of the British fintech company Revolut, demanded to pay them $3 million. This was reported by the Financial Times (FT).

The hackers posted an ultimatum with a digital timer on their website. The group demands to transfer 6,000 Monero cryptocurrency (XMR) to them within a day, threatening otherwise to sell confidential records to other criminal organizations.

The breach affected at least 680 customer accounts. According to the FT, hackers gained access to the files through hacking into Italian government mail, sending inquiries for months under the guise of law enforcement. Among the stolen data were transaction histories, scans of passports, driver's license and photos for identification procedures.

Revolut said it had not received any direct appeals or ransom requests from the attackers. The company said it was providing “immediate support” to affected customers and was cooperating with law enforcement.