The breach, reported by multiple Italian outlets including Ansa, involved hackers exploiting a compromised PEC (certified email) from the Italian Interior Ministry to access Revolut’s systems.
Hackers’ Claims and Ransom Demands
The group has threatened to sell the data directly to affected individuals, offering to remove their information from the dark web for a fee. One hacker said that starting now, over 680 individuals with high net worth are at risk of money theft, phishing attacks, cyber violations, and any other imaginable crime, emphasizing the scale of the threat.
Revolut, gli hacker 'abbiamo i dati della polizia italiana
Revolut has not confirmed receiving the ransom request, though the company stated in a statement that its systems and customer funds have not been touched. However, the hackers claim to have access to Know Your Customer (KYC) documents, addresses, phone numbers, and cryptocurrency transactions, with some files containing 719 pages of transaction history. A screenshot shared by the group shows a user scrolling through what appears to be Revolut data, including passports and identity documents.
Authorities and Regulatory Responses
Italian authorities have launched an investigation, with the Procura di Reggio Calabria opening a case for unauthorized access to a system of public interest. The National Anti-Mafia and Anti-Terrorism Directorate is also involved, as the breach allegedly targeted a government entity. The Italian Data Protection Authority (Garante della Privacy) has initiated a probe into potential security flaws, urging banks to conduct immediate checks on their systems.
A law enforcement entity was reportedly used by the hackers to gain access, with Revolut allegedly cooperating like a “good boy,” according to Ansa. However, the company has not publicly addressed these claims.
Victims and Broader Implications
Caso Revolut, l’hacker ora minaccia i 680 account trafugati
The hackers claim at least 15 Italians are among the 680 affected clients, a figure that contradicts earlier reports of eight. One hacker said that at least 15 Italians are involved, adding that others with Italian documents may also be affected.
While Revolut has not confirmed the breach, the hackers have begun publishing screenshots of client data on the dark web, including facial images and identity documents. We are selling the clients’ data, one message reads, with the group demanding payment to prevent further distribution. The Italian police are monitoring the dark web for potential sales, though no confirmed transactions have been reported yet.
The incident has raised concerns about the security of digital banking platforms, with experts warning that the stolen data could be used for fraud, blackmail, or identity theft. In addition to calibrating the ransom based on each client’s availability, the hackers aim to exploit the fact that some individuals might have every interest in keeping their movements and financial situation hidden, one hacker explained, suggesting the group is targeting high-net-worth individuals.
Additional Details from Source Material
The breach, according to the Financial Times, involved hackers falsely claiming to be an Italian law enforcement entity and Revolut cooperating like a “good boy.” The group has also shared screenshots with images of police chats and internal emails, as reported by Ansa. The hackers claim to have access to 150 gigabytes of data, including diplomatic passports of Alessia Candito and internal documents and agent chats, according to SOURCE 3.
Attacco Hacker Revolut Italian File Documenti Sensibili Riscatto 425605646
Italian investigators are examining whether the hackers’ claims about police documents are accurate. The Procura di Reggio Calabria is overseeing the case, with the National Anti-Mafia and Anti-Terrorism Directorate involved due to the breach’s connection to a government entity. The Italian Data Protection Authority is also investigating potential violations of data protection laws, as noted in SOURCE 5.
The hackers have published images of client data on the dark web, with some files containing relevant material for account holders, according to SOURCE 2. The group has also claimed to have 150 gigabyte of data, including diplomatic passports and transactions in fiat and cryptocurrency, as mentioned in SOURCE 3.
Revolut’s response to the breach remains unclear, though the company has stated that its customer funds have not been touched. The hackers, however, have continued to threaten victims, with one stating that we are officially selling the data. Despite this, it is possible to request removal from the database, but only through a payment, according to SOURCE 2.
The case has also drawn attention to the risks of compromised PEC emails, as the hackers exploited a PEC mailbox previously compromised belonging to the Interior Ministry, according to SOURCE 6. This highlights vulnerabilities in digital communication systems used by government entities.
As of now, no confirmed sales of the stolen data have been reported, though the Italian police continue to monitor the dark web. The hackers’ claims about the scale of the breach and the types of data accessed remain under investigation, with authorities working to verify the authenticity of the group’s assertions.