The reported sequence began with an alleged impersonation operation targeting Italy’s state email infrastructure. Hackers said they had breached the system and used it to pursue Revolut customers described as “crypto whales” — people presumed to hold substantial digital-asset balances.¹

The next reported step was more concrete and more personal. Nearly 700 Revolut customers’ data was handed to scammers, according to a separate report, turning a suspected systems breach into a direct risk for account holders. The available reports do not detail precisely what information was shared or identify the customers affected, but the figure suggests a targeted rather than indiscriminate operation.²

That alleged targeting is central to the case. One account frames the hackers’ interest as a hunt for high-value crypto holders; another focuses on the customers whose data reached fraudsters. Together, they describe the same pressure point: personal information can expose users not only to phishing and identity scams, but also to attempts to map who may hold valuable assets.

The episode then escalated into an extortion demand. Hackers reportedly demanded that Revolut pay $3 million after the data breach, threatening the company with the consequences of the compromised information becoming public or otherwise being exploited.³

The reports leave key questions unresolved, including the full scope of the breach, the authenticity of the attackers’ claims and whether the alleged ransom demand was tied to all of the customer data. But the chronology is stark: alleged access, targeted customer data, and then a multimillion-dollar demand.