www.it-connect.fr
Revolut Leak: Hacker Claims Italian Police Breach and 147 GB of Data
Six months of intrusion, 147 GB of data, and Italian police services used as a gateway: that is what the hacker behind the Revolut data leak claims. These statements should be taken with caution, but they give this case a whole new dimension. Here’s what we know.
Yesterday morning, I published an article about the Revolut data leak, in which the neobank handed over passports, selfies, and transaction histories to a hacker who impersonated the email domain of a government agency. As a reminder, Revolut acknowledged on September 12, 2026, that it had responded to fake information requests sent from the genuine mail domain of a government administration. The company never named that administration and referred to a very limited number of affected customers, without giving a figure.
Since then, the case has taken on a nearly routine turn, namely extortion, but we now also understand that this incident goes much further than Revolut. The reason: the alleged attackers have started publishing data on Telegram. And according to The Register, the data excerpts published concern business leaders, professional athletes, and artists. For their part, the hacker nicknamed IAmNotAVillain is demanding 10,000 bitcoins, which is around 673 million euros according to Revolut’s own converter.
Most notably, to pressure Revolut, they are threatening to publish "more and more data every day until Revolut pays for leaking its customers". Among the people named in these posts are tennis player Alexander Shevchenko and Felix Römer, head of the crypto casino Gamdom. There is also Georges Mikautadze, the professional footballer currently at Villareal in Spain. In fact, the hacker is mistaken, as he presents him as a FC Barcelona player (a rumor that never materialized into a transfer).
Most importantly, France and Switzerland would be the two countries most affected by this Revolut data leak, even though around thirty countries are concerned in total. The fact that this may be a targeted operation (wealthy customers) but geographically broad is not contradictory.
Italian police services as the entry point?
The screenshots shared on Telegram by the hacker’s account suggest that the emails sent to Revolut came from an Italian domain. According to the account International Cyber Digest on X, the hacker IAmNotAVillain would have compromised Italian law enforcement systems to send the data requests.
"URGENT: We are in contact with the Revolut hacker. According to them, they not only took Revolut's data, they also compromised several departments of the Italian police. They say the operation against Revolut lasted six months, and that they used Italian police systems to send data requests to Revolut.", reads the post.
That’s not all. The hacker also claims to hold 147 GB of data taken from several Italian police services, including internal documents, calendars, and personal material, including an officer’s conversations while arguing with his wife. A supporting screenshot shows a folder named Italy, sized at 147 GB, containing 36,393 files spread across 5,223 folders.
If all of this is confirmed, then this case would take on a very different dimension... But for now, although it appears to be true, neither Revolut nor the Italian authorities have responded to these claims.
