Reported by 4 outlets

Timeline

1. original reporting

   Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom

   securityweek.com · 26d ago · September 17th, 2026

   Hackers are demanding a $3 million ransom from the British fintech giant Revolut after siphoning data from it through fake government requests for five months. Last week, the company notified potentially affected users that their personal information, passports, email addresses, phone numbers, and financial information were compromised in the data breach. To obtain the information, the hackers posed as an official government agency. Because Revolut is required to respond to legal requests from law enforcement, it complied. The company refrained from sharing the name of the impersonated government agency or the number of impacted individuals when contacted by SecurityWeek . On Wednesday, a threat actor using the moniker ‘IAmNotAVillain’ publicly demanded $3 million from Revolut, threatening to sell the customer information allegedly obtained from the company. However, it appears that the alleged hacker has not contacted the fintech giant directly to present their demands. “Revolut has not received any direct contact or demand from the individuals or group making these claims,” a Revolut spokesperson said, responding to a SecurityWeek inquiry. IAmNotAVillain also said publicly that a sample of the exfiltrated information was in the hands of a former associate who also claimed responsibility for the data breach. 680 Revolut customers, 147GB of police data The Duel investigations team has established contact with the threat actor and lea

2. update from theperimetersite.com

   3,000,000. That's the number they're asking Revolut for in Monero. We've seen bigger hits from state actors or industrial attacks, but this

   theperimetersite.com · 26d ago · September 17th, 2026

   3,000,000. That's the number they're asking Revolut for in Monero. We've seen bigger hits from state actors or industrial attacks, but this

   via Mastodon https://theperimetersite.com/report/272

3. update from www.occrp.org

   Hackers Demand $3M Ransom in Revolut Data Leak Hackers operating under the moniker “iamnotavillain” gave the London-based fintech giant 24 h

   www.occrp.org · 26d ago · September 17th, 2026

   Hackers Demand $3M Ransom in Revolut Data Leak Hackers operating under the moniker “iamnotavillain” gave the London-based fintech giant 24 h

   via Mastodon https://www.occrp.org/en/news/hackers-demand-3m-ransom-in-revolut-data-leak

4. update from www.securityweek.com

   Audit privileged account access and monitor for anomalous data exfiltration before the ransom note is the first alert you receive. Reward: Y

   www.securityweek.com · 22d ago · September 21st, 2026

   Audit privileged account access and monitor for anomalous data exfiltration before the ransom note is the first alert you receive.