{"id":627414,"date":"2026-09-17T11:22:10","date_gmt":"2026-09-17T11:22:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/627414\/"},"modified":"2026-09-17T11:22:10","modified_gmt":"2026-09-17T11:22:10","slug":"hackers-demand-revolut-hand-over-3m-ransom-amid-data-breach-the-irish-times","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/627414\/","title":{"rendered":"Hackers demand Revolut hand over $3m ransom amid data breach \u2013 The Irish Times"},"content":{"rendered":"

Hackers who claim they were behind a data breach at Revolut <\/a>have threatened to sell the confidential records<\/a> of hundreds of customers to other criminal groups unless the online bank pays a ransom of $3 million (\u20ac2.6 million) within 24 hours.<\/p>\n

The group, which calls itself iamnotavillain, published the ultimatum on its website on Wednesday afternoon next to a digital countdown clock.<\/p>\n

The public demand is unusual given hackers usually prefer to make ransom requests privately and go public only if the target refuses to pay or engage, usually by publishing details of the hack on a dark-web leak site.<\/p>\n

The online message told Revolut to pay \u201c6,000 XMR \/ $3,000,000 … otherwise all the data will be sold, and the blood will be on your hands\u201d. XMR is the cryptocurrency Monero, which is popular with hackers given its transactions are difficult to trace.<\/p>\n

The group told the FT it was using the website to make its demands for the first time and that there had not yet been any negotiations with Revolut.<\/p>\n

[\u00a0Hit by a data breach like Revolut? Here is what you need to doOpens in new window<\/a>\u00a0]<\/p>\n

The FT contacted the hackers via Telegram after they first set up the website late on Monday, displaying redacted screenshots of some of the information allegedly obtained from the bank.<\/p>\n

Shortly after posting the ransom demand, the hackers sent the FT a 60-second screen-capture video showing an unseen user moving through the cache of purported Revolut documents.<\/p>\n

The documents shown in the video appeared to include Revolut customers\u2019 driving licences, passports, identity pictures used during the \u201cknow your customer\u201d verification process and transaction histories.<\/p>\n

The data breach is understood to have affected at least 680 customer accounts.<\/p>\n

The hackers obtained the files by compromising an Italian government email system, which they used to pose as law enforcement and demand information on specific Revolut client accounts over several months, the FT reported on Tuesday.<\/p>\n

The group said it selected the targets by using blockchain analysis to identify Revolut accounts with significant crypto holdings.<\/p>\n

Revolut said on Wednesday evening: \u201cRevolut has not received any direct contact or demand from the individuals or group making these claims.\u201d<\/p>\n

Several affected Revolut customers have expressed concern that their personal data was compromised.<\/p>\n

Revolut previously said it was providing affected customers with \u201cimmediate support\u201d and \u201cworking closely with relevant law enforcement and regulatory authorities\u201d. Since launching in 2015, Revolut has become Europe\u2019s biggest financial technology company, operating as a bank in more than 30 countries and serving 80 million customers. It was recently valued at $115 billion in a secondary share sale. \u2013 Copyright The Financial Times Limited 2026<\/p>\n","protected":false},"excerpt":{"rendered":"Hackers who claim they were behind a data breach at Revolut have threatened to sell the confidential records…\n","protected":false},"author":2,"featured_media":627415,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[72,3312,61,60,8581],"class_list":["post-627414","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-cybersecurity","tag-ie","tag-ireland","tag-revolut"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/627414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=627414"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/627414\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/627415"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=627414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=627414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=627414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}