Hackers who claim they breached Revolut say they obtained confidential customer data by compromising an Italian government email system and posing as law enforcement. The hack affected almost 700 Revolut customer accounts, more extensive than first acknowledged.

Using the pseudonym iamnotavillain, the hackers told the FT they contacted Revolut a "couple of months ago" via Italy's La Posta Elettronica Certificata (PEC) system. They repeatedly requested confidential details—addresses, phone numbers, transaction histories—claiming they were needed for law enforcement. "Revolut was complying like a 'good boy,'" they said.

The hackers selected 680 targets via blockchain analysis to identify accounts with significant crypto holdings, describing them as "crypto whales." Most customers were in Switzerland and France, but data on residents in 31 other countries, including the UK, Germany, and Spain, was also handed over.

Revolut said its systems were not breached. Italian lawmaker Giulia Pastorella called the breach "alarming at an unimaginable level." No ransom demand has been received.