The hackers behind a data breach at Revolut are demanding $3 million worth of monero (XMR) within 24 hours, threatening to sell the stolen customer data to other criminal groups if the bank refuses to pay, according to the Financial Times.
The group, which calls itself “iamnotavillain,” posted the demand Wednesday alongside a countdown clock, the FT reported. It asked Revolut to send 6,000 XMR, a cryptocurrency designed to obscure transaction details.
At least 680 Revolut customer accounts were affected by the breach, according to the report.
The hackers told the FT they chose their targets using blockchain analysis to find Revolut accounts with significant crypto holdings.
The group sent the FT a 60-second screen recording that appeared to show some of the data it obtained. The video included passports, driving licences, photos used for know-your-customer checks and transaction histories, according to the newspaper.
The breach came after attackers posed as government officials and sent requests for information that passed Revolut’s checks. Revolut handed over customer records before discovering the requests were fraudulent, according to notices previously sent to affected customers.
