Story perspectives

Revolut Hit With $3 Million Ransom Demand After Hack

By Drooid · Sep 17, 2026, 11:27 PM UTC · How we work

Summary

Story summary

Hackers demanded a 6,000 XMR (? $3 million) ransom from Revolut after stealing data of about 680 customers.
The attackers used a compromised Italian government PEC email to impersonate law-enforcement and request customer records.
Revolut says core systems, databases and funds were not breached and blocked the fraudulent email address.
Italian prosecutors in Reggio Calabria and the National Anti-Mafia Directorate opened investigations into the email compromise.

History

Historical Context

After the 2017 WannaCry outbreak—over 300,000 Windows PCs in 150 countries crippled by the NSA-originated EternalBlue exploit and linked to North Korea’s Lazarus Group—governments and firms tightened patching and email security. By 2024, attackers leveraged a compromised Italian government PEC address to extort 6,000 XMR from fintech firm Revolut, prompting EU regulators to draft stricter cyber-security rules.

1 of 2

Story summary

Hackers demanded a 6,000 XMR (? $3 million) ransom from Revolut after stealing data of about 680 customers.
The attackers used a compromised Italian government PEC email to impersonate law-enforcement and request customer records.
Revolut says core systems, databases and funds were not breached and blocked the fraudulent email address.
Italian prosecutors in Reggio Calabria and the National Anti-Mafia Directorate opened investigations into the email compromise.

1 / 2