Hackers Demand $3M Monero Ransom Over Revolut Data Breach, Bank Denies Direct Contact

The breach is understood to have affected about 680 customers. According to a source familiar with the matter, Revolut's core infrastructure, databases and customer accounts were not compromised. The company said sensitive customer data was disclosed to an unauthorized third party after attackers submitted fraudulent requests using a legitimate government agency email domain. The exposed records reportedly include identity documents and other sensitive information.

The attackers claim they selected targets by analyzing the blockchain to identify Revolut accounts holding significant cryptocurrency, according to Decrypt and BitKE.

Cointelegraph reported that Revolut said it received no direct contact despite separate ransom demands, one for $3 million in Monero and another for 10,000 Bitcoin, coming from competing parties claiming responsibility for the breach.

Monero is designed for privacy: each transaction generates a random, one-time address, making it difficult for outsiders to link payments to a specific user's public wallet.

Attackers behind the Binance breach converted stolen stablecoins into Ether via Aave, while Tether and Circle moved to block billions in assets.