Hackers Demand $3 Million in Monero Ransom to Withhold Stolen Revolut Data

According to Arzdigital, citing the Financial Times, a hacker group calling itself iamnotavillain, which had earlier accessed identity and financial data of Revolut neobank users, demanded a ransom of 6,000 Monero units (about $3 million) with a 24 hour deadline on Thursday, September 17, 2026, threatening to sell the data to other criminal groups if unpaid. To back its claim, the group released a 60 second video showing passport images, driver's licenses and transaction records.

The ransom demand follows a data breach Revolut had earlier confirmed; at least 680 user accounts were affected, and blockchain analysis suggests the attackers primarily targeted customers with sizable crypto holdings. Revolut has said passwords, private keys and full bank card details were not among the exposed data.