Revolut Data Breach Worsens with Multiple Ransom Demands and Conflicting Claims

Revolut is facing a complex data breach situation, with multiple public ransom demands and conflicting claims of responsibility. A group calling itself 'IAmNotAVillain' demanded $3 million in Monero (XMR) within 24 hours, threatening to sell customer records to other criminal groups. However, the company has stated that it has received no direct contact or demand from those claiming responsibility.

The breach first came to light last week, and Italian authorities have since widened their investigation into how a government email account was allegedly used to obtain customer data. A rival group claiming responsibility, 'Revolut Smilik', previously demanded 10,000 Bitcoin (BTC), worth about $780 million at the time.

'IAmNotAVillain' disputed this claim on its website, alleging that a former associate had received only a small sample of the data before taking credit for the breach. A cybersecurity-focused account has also flagged another website associated with a separate actor claiming responsibility, further complicating efforts to establish who controls the stolen customer records.

Italian authorities are now involved in the investigation due to the suspected intrusion concerning a government entity. Prosecutors have opened an investigation into unauthorized access to a computer system of public interest, while investigators work to determine whether the institutional email account was breached or cloned.