Revolut Data Breach: 680 Customers Exposed After Fake Italian Government Requests

www.osintinvestigate.com

A major Revolut data breach allegedly exposed the personal and financial information of around 680 customers after hackers impersonated an Italian government agency. The operation reportedly lasted about five months, using compromised government email credentials to send fraudulent data requests to Revolut Bank UAB. The stolen information may include passports, identity documents, phone numbers, email addresses and financial data. A threat actor known as “IAmNotAVillain” has publicly demanded $3 million and threatened to sell the allegedly stolen information. Revolut says it has not received any direct ransom demand from the alleged attackers. Italian authorities are investigating the incident, which also involves claims of more than 147GB of data stolen from an Italian law-enforcement agency. This episode examines what happened, how the attack allegedly worked, what information may have been exposed, and why compromised government identities and trusted communication channels represent a serious cybersecurity risk.