Revolut says no direct contact after $3 million public ransom demand

Revolut said Thursday it had received no direct contact from those claiming responsibility for a customer data breach despite multiple public ransom demands.

A group calling itself “IAmNotAVillain” publicly demanded 6,000 Monero (XMR), worth about $3 million, from Revolut within 24 hours, threatening to sell the customer records to other criminal groups, the Financial Times reported Wednesday.

“Revolut has not received any direct contact or demand from the individuals or group making these claims,” a Revolut spokesperson told Cointelegraph.

The public ultimatum is the latest development in a data breach Revolut first disclosed last week, with Italian authorities now widening their investigation into how a government email account was allegedly used to obtain customer data.

One breach, multiple ransom demands

Revolut’s claim that it has received no direct contact adds to uncertainty over who is behind the public ransom demand, as “IAmNotAVillain” is not the only name linked to claims of responsibility for the incident. Its website, iamnotavillain.xyz, was unavailable when checked by Cointelegraph at the time of publication.

An earlier group calling itself “Revolut Smilik” reportedly demanded 10,000 Bitcoin, worth about $780 million at the time, vastly more than IAmNotAVillain’s current $3 million Monero demand.