Hackers claim data on 680 crypto whales stolen from Revolut

A group of attackers claims it downloaded personal details from 680 high‑net‑worth cryptocurrency accounts held at Revolut after compromising an Italian government email system and posing as law enforcement.

The group says the files include names, addresses, phone numbers and transaction histories. According to the attackers, they used La Posta Elettronica Certificata (PEC), Italy’s secure certified email system for official and legal correspondence, to contact Revolut over several months and repeatedly request confidential customer records. The messages reportedly stated that “the information was needed for ongoing law enforcement activities.”

The group reports that it identified targets by using blockchain analysis to find Revolut accounts with large cryptocurrency holdings. Most of the 680 accounts were said to belong to residents of Switzerland and France, with additional customer data on people in 31 other mainly European countries, including the UK, Germany and Spain.

Screenshots and redacted documents posted on a website set up by the attackers were offered as evidence of the data obtained. The group has threatened to release more customer information unless Revolut pays a ransom. Revolut has said it has not been contacted by the perpetrators and has yet to receive a ransom demand.

Materials provided by the attackers appear to show Revolut exchanging account information with an address linked to an arm of Italy’s interior ministry via PEC. There has been no public confirmation from Italian authorities that their systems were breached, and Revolut has not confirmed whether the specific customer data cited by the group was released to the PEC account shown in the materials. The attackers’ claims and the documents they posted have not been independently verified.

Revolut faced regulatory action in Italy last year when it was fined €11.5 million by the Italian competition authority for spreading misleading information about investment services in the Italian market. No public notice of a separate investigation into the alleged PEC compromise has been issued by Italian authorities.