- Hackers demand 6,000 XMR within 24 hours over data from 680 accounts.
- Revolut says its core systems and customer funds were not compromised.
- Identity records and transaction histories could expose users to physical harm.
The Monero ransom targeting Revolut demands 6,000 XMR, valued near $3 million, within 24 hours. The group calling itself iamnotavillain threatens to sell data from about 680 customer accounts. Revolut says its systems and customer funds remained secure. It also says no demand reached the company through formal channels. Passwords, private keys, and full card details were reportedly untouched.
Monero Ransom Follows Months of Fraudulent Data Requests
The Financial Times reported that attackers used a compromised Italian government email system to impersonate law enforcement. Valid domain authentication helped the requests pass Revolut checks. The operation reportedly continued for months without breaching Revolut core systems.
Exposed records allegedly include passports, driving licences, KYC selfies, addresses, IBANs, statements, withdrawals, and crypto transaction histories. The group claims it holds 147 gigabytes of data. It also showed the Financial Times a recording that appeared to display the files.
The Monero ransom followed blockchain analysis used to identify accounts with substantial crypto holdings. Most targeted users reportedly lived in Switzerland and France, although residents across 31 other European countries were affected.
That selection sharply raises personal safety risks. Identity documents, home addresses, and proven holdings can support fraud, coercion, or violent attacks.
Revolut Monero Ransom Raises Regulatory Control Questions
Revolut notified affected customers, regulators, and law enforcement. The UK Information Commissioner and Italian authorities are investigating. Lithuanian officials are also exchanging information because Revolut maintains its registered office there.
Prosecutors are examining whether the government mailbox was infiltrated or cloned. Italian privacy authorities have urged banks to review similar vulnerabilities and report possible breaches.
Monero is a privacy coin that conceals sender, recipient, and amount data by default. TRM Labs says ransomware actors favour XMR, although most settlements still use Bitcoin because it offers deeper liquidity.
The public Monero ransom is unusual because extortionists normally approach victims privately before publishing threats. Revolut faces a control problem beyond the $3 million demand.
Customer money remains intact, but the incident exposed weaknesses in validating official information requests. Those weaknesses may attract scrutiny during future banking and licensing reviews.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
