Hackers calling themselves "iamnotavillain" have demanded 6,000 Monero, worth $3 million, from Revolut within 24 hours, threatening to sell stolen customer data to criminal groups. At least 680 accounts were affected. The group told the Financial Times that blockchain analysis helped identify accounts with significant crypto holdings and provided a 60-second recording that appeared to show passports, driving licences, know-your-customer photos and transaction histories. The breach followed attackers impersonating government officials to obtain customer information through requests that passed Revolut’s checks. Revolut said it blocked the address involved, notified government authorities, law enforcement and regulators, and that its systems and customer funds were unaffected. No negotiations had taken place when the Financial Times published its report, while Revolut had not responded to CoinDesk by publication.