Hackers claiming to have breached financial technology firm Revolut are demanding a $3 million ransom paid in Monero, warning that they will sell stolen customer data if the company refuses to meet their terms within 24 hours.
The Ransom Demand
The attackers reportedly gave Revolut a tight one-day window to comply with their demands, opting for Monero as the payment method. The privacy-focused cryptocurrency is favored by cybercriminals because its transactions are far more difficult to trace than those on transparent networks like Bitcoin.
According to the threat, the group said it specifically zeroed in on customers holding substantial cryptocurrency balances, suggesting the breach was designed to maximize the value of the compromised information rather than casting a wide net.
Pay within 24 hours or the customer data goes up for sale — that's the ultimatum facing Revolut.
Why It Matters
A breach targeting high-value crypto holders raises the stakes considerably, as exposed account details could be leveraged for follow-on attacks, phishing campaigns, or attempts to drain digital assets. Customers with large holdings are often prime targets for social engineering schemes.
The incident underscores the persistent security risks facing fintech platforms that bridge traditional banking and cryptocurrency. As these companies expand their crypto offerings, they become increasingly attractive targets for organized cybercriminal groups.
Key concerns raised by the reported attack include:
- The use of untraceable Monero to shield the attackers' identities
- The deliberate targeting of customers with significant crypto holdings
- A compressed 24-hour deadline designed to pressure a fast payout
- The threat to sell sensitive data if the ransom is not paid
Revolut has faced scrutiny over security matters in the past, and how the company responds to this latest threat could shape customer confidence in its ability to safeguard sensitive financial information.