Email: contact@ecfiu.org
Contact Us September 16, 2026
ECFIU Investigates Revolut Data Breach: Over 11 Million Customers' Information Stolen by Fraudsters
The ECFIU has launched an urgent investigation into a catastrophic Revolut data breach that exposed the personal information of over 11 million European customers.
The European Crypto Fraud Intelligence Unit (ECFIU) has launched an urgent investigation into a catastrophic data breach at digital bank Revolut that exposed the sensitive personal information of more than 11 million European customers. The attackers used a sophisticated phishing email from a legitimate government domain to trick Revolut's verification systems into handing over massive amounts of customer data.
The attack specifically targeted high-net-worth clients holding significant crypto assets. One fraudster, "IAmNotAVillain," claimed to have 147GB of data and demanded $3 million in ransom, while another group, "Revolut Smilik," demanded 10,000 Bitcoin (approximately $780 million).
In a breakthrough, ECFIU investigators traced the breach to an Eastern European data center, breached the building, and seized multiple servers containing critical evidence. No arrests have been made, and the investigation continues.
Revolut stated its core systems and customer funds were not compromised and has notified affected customers and the UK's ICO. Parallel investigations are underway across multiple European countries.
"This represents one of the largest data breaches in European financial history," an ECFIU spokesperson stated. "We have located the data center and seized crucial servers, but our work is far from over."
The ECFIU urges Revolut users to treat any calls, texts, or emails claiming to be from their bank or a government agency with extreme suspicion. A dedicated support portal has been established for affected customers.
Amsterdam, Netherlands. September 16, 2026.
In a breakthrough, ECFIU investigators traced the breach to an Eastern European data center, breached the building, and seized multiple servers containing critical evidence. No arrests have been made, and the investigation continues.
Revolut stated its core systems and customer funds were not compromised and has notified affected customers and the UK's ICO. Parallel investigations are underway across multiple European countries.
"This represents one of the largest data breaches in European financial history," an ECFIU spokesperson stated. "We have located the data center and seized crucial servers, but our work is far from over."
The ECFIU urges Revolut users to treat any calls, texts, or emails claiming to be from their bank or a government agency with extreme suspicion. A dedicated support portal has been established for affected customers.
Amsterdam, Netherlands. September 16, 2026.
Believe you're a victim of fraud? Check your eligibility and report your case here:
DISCLAIMER
The European Crypto Fraud Intelligence Unit (ECFIU) focuses exclusively on cyber-enabled fraud, primarily within the realms of cryptocurrency and investment schemes. For reports concerning crimes such as human trafficking, human rights violations, terrorist financing, or other serious offenses with a primary physical component, please contact the relevant national law enforcement or government authorities directly.