The hackers have reportedly given Revolut 24 hours to pay the ransom, or else they will sell the stolen data to other criminals.

A group of hackers claiming to be responsible for a recent Revolut data breach has reportedly threatened to sell the confidential records of hundreds of customers to other criminal groups unless the fintech company pays them a ransom of $3m in cryptocurrency Monero. 

According to the Financial Times, the group – which called itself ‘iamnotavillain’ – published the demand on its website yesterday (16 September) alongside a digital countdown clock, giving the British online bank 24 hours to comply. 

Last Saturday (12 September), Revolut admitted that it disclosed sensitive customer data to an unauthorised fraudulent party after receiving requests for information from an email with a government agency domain. The leaked data included information such as full names, dates of birth, occupations, addresses, contact details, passports, drivers’ licences, financial statements and facial verification images.

It is believed around 680 people, including 12 in Ireland, have had their personal information compromised. 

The Financial Times contacted the hacking group through Telegram and were then sent a 60-second screen-capture video showing an unseen user moving through the cache of purported Revolut documents.

Reportedly the online message told Revolut to pay the $3m, “otherwise all the data will be sold and the blood will be on your hands”. The group also told the Financial Times that the demand notification was the first communication attempt and that, as of yet, there had been no negotiations with Revolut. 

In an official statement to SiliconRepublic.com, a Revolut spokesperson said: “Revolut has not received any direct contact or demand from the individuals or group making these claims.”

The reported ransom comes after Revolut recently announced that it had applied for a Swiss banking licence as part of its continued global expansion campaign. The company plans to invest more than 150m Swiss francs into Switzerland over the next five years, as a means of creating jobs and supporting product development. 

In August, the company received a full banking licence in France, giving the fintech giant a second European Union hub. The company claims to have more than 75m customers worldwide.

Updated, 5.00pm, 17 September 2026: This article was amended to clarify accurate phrasing in relation to the data breach.

Don’t miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic’s digest of need-to-know sci-tech news.