Italian authorities are investigating a security breach involving government email accounts linked to a leak of Revolut customer data. The Polizia Postale, Italy's cybercrime unit, is probing allegations of unauthorized computer system access and fraud following reports that hackers used compromised accounts to obtain sensitive information.
Media reports identified one of the affected accounts as belonging to the Prefecture of Reggio Calabria, though the agency denied sending requests to Revolut. The breach involved the Posta Elettronica Certificata (PEC) system, a service providing legal value to messages. Italy’s CERT-AGID agency noted that PEC does not guarantee content security.
Revolut confirmed it reported the incident to Italian authorities upon detection. The company stated that its internal systems, databases, and customer funds remain secure. Revolut declined to name the specific government agency involved, citing an ongoing police investigation and confidentiality obligations.
According to data from Italy’s CERT-AGID cybersecurity agency, there have been more than 650 reported cases involving abused or illicit PEC accounts since the beginning of 2026. The investigation into the current incident remains active as authorities continue to assess the scope of the unauthorized access.
