{"id":51238,"date":"2026-09-17T00:12:09","date_gmt":"2026-09-17T00:12:09","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=51238"},"modified":"2026-09-17T00:12:09","modified_gmt":"2026-09-17T00:12:09","slug":"revolut-hackers-demand-3-million-as-breach-exposes-crypto-holders-data","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=51238","title":{"rendered":"Revolut hackers demand $3 million as breach exposes crypto holders’ data"},"content":{"rendered":"

As stated by the Financial Times (FT), the attackers who duped Revolut into giving up customer data are asking for a ransom of $3 million<\/a> to ensure that the information remains confidential. The information includes identity documents, home addresses, and transaction records related to crypto-heavy accounts.<\/strong><\/p>\n

The ransom is just one of the problems. The stolen data could connect visible on-chain wealth to a real person. For Revolut, which has just received a conditional approval<\/a> for forming a national bank, the incident raises a larger question: how does the centralized financial system protect its KYC data?<\/p>\n

A Monero ransom and a threat to leak<\/strong><\/h3>\n

According to the report in the Financial Times, the group, calling itself \u201ciamnotavillain,\u201d demanded $3 million in Monero<\/a> and threatened to sell the records if Revolut did not comply. Reuters said Revolut had received no ransom demand<\/a> or direct contact from the attackers. One source cited by the news outlet said that around 680 customer files<\/a> had been compromised in this case, although Revolut has offered no specifics, referring to the number of affected customers only as \u201climited.\u201d<\/p>\n

The attackers also claimed to have hacked an email system of the Italian government<\/a> and performed blockchain-focused analysis to identify customers of Revolut who own a lot of cryptocurrencies, according to a separate report by the FT. Revolut has not confirmed this claim on its own.<\/p>\n

How the records left Revolut<\/strong><\/h3>\n

According to Revolut, its core systems and client funds were not compromised<\/a>. Instead, an email account from the domain of a legitimate government agency was utilized in order to submit fraudulent information requests. The company stated it was a \u201csophisticated external impersonation scam\u201d, adding that once it got wind of the scam, it blocked the email address.<\/p>\n

The leaked information included names, dates of birth, home addresses, phone numbers, ID documents, verification selfies, bank statements, and transaction lists. Furthermore, The Block reported\u00a0that former Mt. Gox executive Mark Karpeles said he was affected by the breach and shared a notification from Revolut saying\u00a0details about Bitcoin transactions were revealed.<\/p>\n

\n

\u201cRevolut customers were targeted in a fraudulent emergency data request sent via an email at a \u2018government agency.\u2019\u201d<\/em> \u2014 Mark Karpel\u00e8s<\/a><\/p>\n<\/blockquote>\n

According to the on-chain analyst ZachXBT<\/a>, the attack seemed to be deliberate rather than random.<\/p>\n

\n

\u201cWhile the incident is likely limited in size it seems to have been targeted at high net worth users.\u201d<\/em> \u2014 ZachXBT<\/p>\n<\/blockquote>\n

Why exposed KYC becomes a safety problem<\/strong><\/h3>\n

A leaked address paired with evidence of large crypto holdings can turn a data breach into a physical-security threat. Chainalysis<\/a> says many violent crypto attacks are premeditated, with victims identified through leaked data, social media, blockchain analysis, or insider information.<\/p>\n

\"\"
Crypto Wrench Attacks in 2026: $124.1M Exposure and 52 Verified Incidents<\/strong><\/figcaption><\/figure>\n

Chainalysis says its figures likely undercount the real losses because many attacks go unreported. CertiK<\/a> likewise calls its dataset indicative rather than exhaustive. France accounted for 33 of CertiK\u2019s 52 verified H1 cases, while home invasions jumped from one in H1 2025 to 20. Cryptopolitan previously reported<\/a> on that sharp rise in physical attacks.<\/p>\n

Pressure lands on centralized platforms<\/strong><\/h3>\n

The broader market impact is more likely to show up first in security and compliance spending than in crypto prices. Platforms holding KYC records face greater pressure to independently verify official data requests and limit how much sensitive information a compromised process can expose. The European Banking Authority<\/a> already ranks cyber risk and data security as the leading operational-risk driver for banks, followed by fraud.<\/p>\n

That matters because users remain heavily concentrated on centralized venues. FCA research<\/a> found that 73% of UK crypto users obtain assets through centralized exchanges, while 25% said tighter regulation would make them more likely to invest. Revolut, with more than 80 million customers, sits squarely at that intersection of banking, crypto and increasingly valuable identity data.<\/p>\n

\u00a0<\/p>\n

Don\u2019t just read crypto news. Understand it. Subscribe to our newsletter. It’s free<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

As stated by the Financial Times (FT), the attackers who duped Revolut into giving up customer data are asking for a ransom of $3 million to ensure that the information remains confidential. The information includes identity documents, home addresses, and transaction records related to crypto-heavy accounts. The ransom is just one of the problems. The […]<\/p>\n","protected":false},"author":1,"featured_media":51239,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-51238","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"\nRevolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=51238\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Revolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"As stated by the Financial Times (FT), the attackers who duped Revolut into giving up customer data are asking for a ransom of $3 million to ensure that the information remains confidential. The information includes identity documents, home addresses, and transaction records related to crypto-heavy accounts. The ransom is just one of the problems. The […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=51238\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-17T00:12:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptomag.finance\/wp-content\/uploads\/2025\/06\/generic-crypto-image.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"560\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Revolut hackers demand $3 million as breach exposes crypto holders’ data\",\"datePublished\":\"2026-09-17T00:12:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238\"},\"wordCount\":650,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238\",\"name\":\"Revolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp\",\"datePublished\":\"2026-09-17T00:12:09+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=51238\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=51238#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Revolut hackers demand $3 million as breach exposes crypto holders’ data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Revolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=51238","og_locale":"en_US","og_type":"article","og_title":"Revolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag","og_description":"As stated by the Financial Times (FT), the attackers who duped Revolut into giving up customer data are asking for a ransom of $3 million to ensure that the information remains confidential. The information includes identity documents, home addresses, and transaction records related to crypto-heavy accounts. The ransom is just one of the problems. The […]","og_url":"https:\/\/cryptomag.finance\/?p=51238","og_site_name":"Cryptomag","article_published_time":"2026-09-17T00:12:09+00:00","og_image":[{"width":1000,"height":560,"url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/2025\/06\/generic-crypto-image.webp","type":"image\/webp"}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=51238#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=51238"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Revolut hackers demand $3 million as breach exposes crypto holders’ data","datePublished":"2026-09-17T00:12:09+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=51238"},"wordCount":650,"image":{"@id":"https:\/\/cryptomag.finance\/?p=51238#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=51238","url":"https:\/\/cryptomag.finance\/?p=51238","name":"Revolut hackers demand $3 million as breach exposes crypto holders' data - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=51238#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=51238#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp","datePublished":"2026-09-17T00:12:09+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=51238#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=51238"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=51238#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/Hackers-are-stealing-crypto-credentials-on-GitHub-IKXuLS.webp","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=51238#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Revolut hackers demand $3 million as breach exposes crypto holders’ data"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/51238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=51238"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/51238\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/51239"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=51238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=51238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=51238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}