Privacy Market: Revolut Data Breach: Criminals Posed as Italian Police

British neobank Revolut fell victim to a sophisticated social engineering attack where criminals impersonated an Italian government authority to request customer data. Approximately 680 customers across various countries, including Germany, were affected, with data such as identity documents, contact details, and transaction histories exposed. A group named 'Iamnotavillain' claimed responsibility and demanded a $3 million ransom in Monero, but Revolut said it had no direct contact. Other groups made similar claims. The attackers exploited a compromised or cloned email account within Italy's certified PEC email system, which financial institutions are legally obliged to respond to. Revolut stated its own systems were not compromised and no customer funds were lost. The incident raises concerns about the trustworthiness of official email domains and the need for enhanced verification processes.