The hacking group called iamnotavillain is demanding a $3 million ransom from British online bank Revolut, threatening to sell stolen customer data to other criminal groups, the Financial Times reports.
The hackers posted an ultimatum on their website, setting a 24-hour deadline for the transfer of 6,000 units of Monero (XMR) cryptocurrency. The group insists it has not yet held talks with Revolut.
The Financial Times contacted the hackers and obtained a video that the group claims shows the trove of stolen data. The documents include passports, driver’s licenses, and bank transaction histories. According to the newspaper, the leak affected the accounts of at least 680 customers.
The hackers, as the FT previously revealed, did not break into Revolut’s system directly, but penetrated the email of an Italian government agency and posed as law enforcement officers for several months, sending requests to the bank for specific customer data.
Revolut said it has not received any requests or requests directly from the hacking group. The bank reported that it is providing assistance to affected customers and is cooperating with law enforcement agencies and regulators.
Revolut was founded in London in 2015 by Nikolai Storonsky and Vlad Yatsenko. Storonsky is a native of Russia and is currently the general director of the bank. After Russia’s invasion of Ukraine, he renounced his Russian citizenship. Yatsenko was born in Ukraine and is included in the board of directors of the company.
Revolut serves around 8 million customers and operates as a bank in more than three dozen countries. A recent stock sale valued the company at $115 billion.