Revolut Data Leak May Trace Back to Compromised Italian Government Accounts

Hackers allegedly gained access to an Italian government PEC account and, posing as law enforcement, requested Revolut customer data. According to FT, about 680 customers were affected; Revolut claims its systems were not breached. The group IAmNotAVillain claims it had access to Italian police systems for six months and exfiltrated 147 GB of data.

• About 680 Revolut customers affected according to Financial Times
• Attack went through domain pec.interno.it and the Reggio Calabria prefecture
• Attackers obtained documents, addresses, bank data and selfies
• Group IAmNotAVillain claimed 147 GB of stolen Italian government data