The U.K.-based fintech company Revolut is currently facing extortion demands from a hacker who claims to have accessed customer data. The attacker, operating under the alias I Am Not A Villain, has begun leaking stolen information and is threatening further disclosures unless a ransom is paid.
The incident originated from a scam where an unauthorized party utilized a legitimate government email domain to deceive the company. Revolut confirmed that it blocked the malicious email address upon discovery and has notified law enforcement agencies. The U.K. Information Commissioner’s Office is currently investigating the breach.
According to reports, the security incident affected approximately 680 individuals out of the company's 80 million total customer base. The firm stated that its core systems and customer funds remain secure, and it has reached out to the specific users impacted by the data exposure to provide support.
The breach has drawn attention due to reports that some high-net-worth individuals in the digital asset sector were targeted. There are concerns that the leaked data could lead to physical extortion attempts, specifically targeting cryptocurrency investors to gain access to their private keys.
