Hacking Group Claims Revolut Breach, Demands 6,000 Monero From Crypto-Rich Users

The group says it targeted Revolut customers holding large crypto balances and wants payment in the privacy coin Monero. A group claiming to have breached digital banking platform Revolut says it is demanding 6,000 Monero from the company, according to a report published by Unchained. The group reportedly stated that it specifically sought out customers who held large amounts of cryptocurrency through their Revolut accounts. Monero, often abbreviated XMR, is a privacy-focused cryptocurrency designed to obscure transaction details, including sender, receiver, and amount. Its use in ransom demands is not new. Groups behind extortion attempts frequently prefer Monero over Bitcoin because its ledger does not expose wallet balances or transaction histories to public blockchain analysis in the same way. The claim, as reported, has not been independently verified by Revolut or by outside security researchers at the time of this report. Revolut has not issued a public statement confirming a breach of its systems or acknowledging the ransom demand described by the group. Revolut operates as a financial technology company offering banking, currency exchange, and cryptocurrency trading services to millions of customers globally. Its crypto offering allows users to buy, hold, and in some cases transfer digital assets directly from the app. A confirmed breach targeting crypto holders specifically would raise questions about how customer account data, including balance information, may have been accessed or exposed. Claims of this nature are common in the wake of alleged cyberattacks, and not all such claims are later substantiated. Extortion groups sometimes exaggerate the scope of data obtained, or make demands designed to generate media attention rather than reflect a fully executed breach. Until Revolut or independent investigators confirm details, the extent of any actual compromise, and whether customer funds or personal data were genuinely accessed, remains unclear. The reported targeting of crypto holders specifically is notable given the broader pattern of attacks against exchanges, wallets, and fintech platforms that offer digital asset services. Financial platforms that combine traditional banking with crypto access present an attractive target for attackers because a single account can expose both fiat balances and digital asset holdings. Security researchers have long warned that platforms bridging traditional finance and crypto carry unique risks, since a breach can potentially expose users across both asset classes simultaneously. If the claims prove accurate, the incident would add to a growing list of cyberattacks against companies that serve as gateways between conventional banking and digital assets. Regulators and security professionals have repeatedly flagged this intersection as a point of vulnerability, given the difficulty of applying uniform security standards across both traditional and crypto-native infrastructure. Market Impact Should the breach and ransom demand be confirmed, Revolut could face reputational and regulatory scrutiny over how it protects customer data and crypto holdings.