Context: Cyberattack on Revolut
Revolut confirmed in September that it had sent information about approximately 680 customers to cybercriminals posing as Italian authorities. The scammers allegedly used a certified email address associated with the Prefecture of Reggio Calabria and carried out requests via messages over several months, citing an alleged investigation and European judicial cooperation instruments.
The hackers who claimed to have obtained the data threatened to sell the data onward if the bank did not pay a ransom of three million dollars. Revolut acknowledged that some customers' data had been affected, but stated that the funds had not been accessed and that it had opened an internal audit, while the Italian authorities had launched investigations.