Revolut confirmed that 680 customers were affected after attackers hijacked an @interno.it email account belonging to Italy’s Ministry of Interior and used it to submit fraudulent emergency data requests. The broader incident involved personal data from between 680 and 700 users, including identity documents, passports, verification selfies, IBANs, Bitcoin transaction histories and other account information. Felix Römer, one affected customer, said he was shocked after receiving an urgent security email stating that his home address, passport photo and transaction history had reached a scammer. Revolut said its internal systems and customer funds were not compromised. The attackers, using the Telegram handle I Am Not A Villain, circulated samples of the data and demanded 10,000 Bitcoin. Italy’s Polizia Postale and Agenzia per la Cybersicurezza Nazionale are investigating how the government mailbox was compromised, while the UK’s Information Commissioner’s Office is examining Revolut’s verification and data-handling procedures. Revolut blocked the account, notified authorities and contacted affected customers. Earlier reporting used the name Revolut Smilik for an extortion group, but the relationship between the names remains unclear.