Hackers calling themselves iamnotavillain demanded 6,000 Monero, worth about $3 million, from Revolut and set a 24-hour countdown on September 16, 2026, threatening to sell data from 680 customers to criminal networks. The demand followed an earlier reported request for 10,000 Bitcoin that was rejected and which the group attributed to an impersonator or former associate. The underlying disclosure resulted from fraudulent requests in which attackers impersonated government officials and cleared Revolut's authentication checks, rather than a compromise of the company's core systems or customer funds. Exposed records reportedly include identity documents, KYC photographs and transaction histories, including some Bitcoin wallet reference numbers and transfer records, while Revolut said private keys, passwords, security codes, complete card details and biometric facial telemetry were not disclosed. Britain's Information Commissioner's Office has opened an investigation, Italy's cybercrime police are examining alleged misuse of government-certified email accounts, and UK and European Union regulators have scheduled supervisory hearings for late in the third quarter of 2026.