How Revolut Responded to the Extortion Attempt
A 24-hour ultimatum issued by cybercriminals targeting Revolut has expired without any verified evidence that stolen customer data has been sold or leaked. The hackers, operating under the alias „iamnotavillain,” had demanded payment of 6,000 Monero cryptocurrency—valued at roughly $3 million—within a day to prevent the release of sensitive information. As the deadline passed, Revolut confirmed it did not comply with the extortion attempt and stated there is no independent confirmation that the data was transferred to other criminals.
Breaking news
X Money Launches with High-Yield Savings and Cashback Rewards
Splitit Announces White-Label Credit Card Launch
Billing Friction Puts $12.3 Billion in Auto Loan Payments at Risk
OneSpan Unveils New e‑Signature Features Including Identity Wallets and AI Workflow SupportThe threat emerged when the group claimed to have accessed internal systems and obtained personal details from Revolut users, including names, email addresses, and phone numbers. While the fintech company acknowledged a security incident, it emphasized that no financial data, such as account numbers or card details, was compromised. Revolut said it immediately launched an investigation, engaged cybersecurity experts, and notified relevant authorities. The attackers used a public channel to make their demand, setting a strict timeline that has now lapsed without further action from their side.
Did the Hackers Actually Steal Valuable Data?
Revolut maintained that its core banking infrastructure remained secure and that customer funds were never at risk. The company stated it does not negotiate with cybercriminals and refused to pay the ransom, citing both policy and the lack of guarantee that payment would prevent data misuse. Security teams monitored dark web forums and leak sites for any signs of the alleged data appearing, but no such material has surfaced so far. Experts note that extortion groups sometimes bluff or exaggerate the scope of breaches to pressure victims into paying quickly.
Despite the claims, Revolut insists the accessed information was limited to basic contact details already visible in user profiles or obtainable through public means. The company said no passwords, authentication tokens, or transaction histories were exposed. Independent cybersecurity analysts have not found corroborating evidence of a large-scale data leak tied to this incident. The lack of follow-through by the attackers after the deadline raises questions about the legitimacy of their access or their intent to monetize the alleged breach.
Was any customer money stolen in the Revolut incident? No, Revolut confirmed that no financial assets or account credentials were compromised in the security event.
Frequently Asked Questions
Did Revolut pay the ransom demand of 6,000 Monero? Revolut stated it did not pay any ransom and does not engage with extortion attempts by cybercriminals.
Is there proof the hackers sold user data after the deadline? As of now, there is no independent verification that the alleged data was sold, leaked, or transferred to other parties.
