Max Karpis(@maxkarpis):After Revolut's customer data leak, Italy is now asking how far this goes. The files left Revolut after requests that arrived on a real Italian official channel. Revolut’s systems were not broken into. Revolut did not spot that the other end was not the agency it thought it was. PD senators Lorenzo Basso and Antonio Nicita have put an urgent question to Interior Minister Piantedosi. Milano Finanza says their text points to a Prefettura di Reggio Calabria PEC. AVS MP Elisabetta Piccolotti has tabled one too. Giulia Pastorella (Azione) asked first: how many other PEC emails, how many other firms. That is parliament. The ministry has not confirmed the prefecture. The FT, citing IAmNotAVillain and a person familiar with Revolut, says the exchange ran for months on Italy’s PEC. The group told the paper they posed as Italian law enforcement and that Revolut kept sending files — their phrase was “like a good boy.” They say they picked about 680 customer details, mostly from Switzerland and France. Korra at Duel — unconfirmed, from the same actor — says the first ask was about five months ago: a European Investigation Order aimed at Revolut Bank UAB in Lithuania. Screenshots show Revolut’s Milan PEC writing to interno(.)it, and a mail telling the other side to put the Cyprus crypto company on the letterhead. Korra also says that when the document was wrong, Revolut explained how to correct it. Treat that pack as the attacker’s version until Italy or Revolut walks through those files. ANSA: Postal Police are looking at unauthorised access and computer fraud. When Revolut checked with the institution, that institution said it had not sent the mail. So: official-looking Italian mail; Lithuania’s bank (and sometimes a Cyprus crypto co.) answered; IDs, selfies, statements, Bitcoin histories went out. 680 profiles. Press office still says “limited.” Money did not move. Rome is asking how many other companies got the same PEC. People elsewhere say the same hole exists at home. Revolut and the people on that list are learning it the hard way.

2026.09.16 05:43

After Revolut's customer data leak, Italy is now asking how far this goes. The files left Revolut after requests that arrived on a real Italian official channel. Revolut’s systems were not broken into. Revolut did not spot that the other end was not the agency it thought it was. PD senators Lorenzo Basso and Antonio Nicita have put an urgent question to Interior Minister Piantedosi. Milano Finanza says their text points to a Prefettura di Reggio Calabria PEC. AVS MP Elisabetta Piccolotti has tabled one too. Giulia Pastorella (Azione) asked first: how many other PEC emails, how many other firms. That is parliament. The ministry has not confirmed the prefecture. The FT, citing IAmNotAVillain and a person familiar with Revolut, says the exchange ran for months on Italy’s PEC. The group told the paper they posed as Italian law enforcement and that Revolut kept sending files — their phrase was “like a good boy.” They say they picked about 680 customer details, mostly from Switzerland and France. Korra at Duel — unconfirmed, from the same actor — says the first ask was about five months ago: a European Investigation Order aimed at Revolut Bank UAB in Lithuania. Screenshots show Revolut’s Milan PEC writing to interno(.)it, and a mail telling the other side to put the Cyprus crypto company on the letterhead. Korra also says that when the document was wrong, Revolut explained how to correct it. Treat that pack as the attacker’s version until Italy or Revolut walks through those files. ANSA: Postal Police are looking at unauthorised access and computer fraud. When Revolut checked with the institution, that institution said it had not sent the mail. So: official-looking Italian mail; Lithuania’s bank (and sometimes a Cyprus crypto co.) answered; IDs, selfies, statements, Bitcoin histories went out. 680 profiles. Press office still says “limited.” Money did not move. Rome is asking how many other companies got the same PEC. People elsewhere say the same hole exists at home. Revolut and the people on that list are learning it the hard way.

Forward to community