The malicious actors responsible for a data breach at Revolut are requesting $3 million in monero (XMR) within a 24-hour window, while warning that they will auction off the pilfered user records to rival criminal syndicates if the institution fails to comply, as reported by the Financial Times.
Operating under the moniker “iamnotavillain,” the collective published their ultimatum on Wednesday accompanied by an active countdown timer, the FT noted. They instructed Revolut to transfer 6,000 XMR, a digital currency engineered to mask transaction specifics.
Based on the findings, a minimum of 680 Revolut user accounts suffered compromises.
The threat actors revealed to the FT that they pinpointed their victims by leveraging blockchain analytics to locate Revolut profiles boasting substantial cryptocurrency balances.
The group provided the FT with a 60-second video recording that seemingly displayed a portion of the acquired files. As outlined by the publication, the footage featured passports, driver’s licenses, images utilized for identity verification procedures, and past transactions.
This security lapse occurred after perpetrators impersonated state officials and submitted data inquiries that successfully bypassed Revolut’s verification protocols. According to prior notifications dispatched to impacted users, Revolut surrendered consumer records before realizing the inquiries were fraudulent.
Previously, Revolut informed CoinDesk that it disabled the specific address utilized in those communications and alerted the appropriate state authority, police departments, and oversight bodies. The firm maintained that its infrastructure and user assets remained secure.
At the time this story went to press, the cybercriminals informed the FT that zero discussions had taken place with Revolut.
By the time of publication, Revolut had not replied to CoinDesk’s inquiries seeking comment.
Originally published at https://www.coindesk.com/markets/2026/09/16/revolut-hackers-demand-usd3-million-in-monero-threaten-to-sell-customer-data.
