Hackers who stole the data of 680 European Revolut customers are demanding $3 million

A group of hackers is demanding a ransom of 3 million dollars from Revolut after they allegedly stole the personal data of approximately 680 European customers. The information was obtained through a compromised institutional email account associated with the prefecture of Reggio Calabria, Italy. Italian prosecutors have opened an investigation, and the hackers are threatening to sell the data to other criminal groups if they do not receive the money within 24 hours.

The demand was published on Wednesday, September 17, 2026, on a dark web site by the group calling itself “iamnotavillain.” The hackers are requesting payment in Monero, a cryptocurrency that is difficult to trace, and claim to possess approximately 147 gigabytes of data. The information presented as having been stolen allegedly includes photographs, passport details, driving licences, and other identity documents.

Revolut confirmed that the data of some customers had been affected, but stated that their funds had not been accessed. The group sent the Financial Times a recording of approximately 60 seconds in which a user browses documents that the hackers claim came from the bank.

The investigation is being coordinated by the Reggio Calabria Public Prosecutor’s Office, with the involvement of the National Anti-Mafia and Anti-Terrorism Directorate and the police specializing in cybercrime. The authorities are trying to establish whether a computer belonging to the prefecture or the Italian Ministry of the Interior was compromised and whether the email address was infiltrated or cloned. The Italian data protection authority is examining possible breaches and has asked financial institutions to urgently review their security systems.