Hackers Demand $3 Million in Monero From Revolut After Data Breach

A hacking group calling itself iamnotavillain has demanded a ransom of approximately $3 million in Monero from Revolut, threatening to sell stolen customer data to other criminals within 24 hours. The demand follows a data breach in which attackers obtained records from at least 680 customer accounts by impersonating government officials. The hackers published their demand on Wednesday alongside a countdown clock, requesting 6,000 Monero (XMR), a privacy-focused cryptocurrency. They threatened to sell the stolen files to other criminal groups if Revolut did not comply. The attackers initially demanded Bitcoin but later switched to Monero, blaming the earlier demand on an impersonator or former associate. Revolut stated it had received no direct contact from the group claiming responsibility and did not intend to pay any ransom. The company described the incident as a sophisticated external impersonation scam and said its core systems, databases, and customer funds were not compromised. The breach occurred after attackers posed as government officials and sent fraudulent information requests using a legitimate government email domain.