Revolut Breach Ran 5 Months, Hit 680 High-Profile Accounts, Now Draws $3M Ransom Demand

Revolut experienced a five-month breach where attackers, using credentials sourced from infostealer logs, impersonated Italy's Ministry of the Interior domain (pec.interno.it) and sent fraudulent authenticated data requests to Revolut Bank UAB; roughly 680 crypto "whale" customer records and more than 147GB of law enforcement data were exfiltrated, and an actor calling itself "IAmNotAVillain" demanded $3 million.