Hackers use Italian institutional email to steal data from Revolut

Using a compromised institutional email belonging to an Italian institution, hackers requested and obtained customer data from the UK banking services company Revolut. According to what we understand, the Postal Police is investigating for unauthorized access to the computer system and computer fraud.

Initially, the messages - which apparently originated from the institutional email of a prefecture - did not arouse suspicion from Revolut, which sent the requested data. The emails then continued until the company wanted to see clearly and turned directly to the Italian institution which denied being the source of the messages. Investigations are underway to reconstruct the compromise of the email.

For its part, the company speaks of a "sophisticated external impersonation scam, in which an unauthorized third party used an email address belonging to a legitimate domain of a government agency to submit fraudulent requests for information", but says that "Revolut's systems and customer funds were not affected".

"As soon as the fraud was identified - continues the Revolut spokesperson - we immediately blocked the address and informed the relevant government agency, as well as law enforcement authorities, data protection authorities and financial supervisory authorities. We contacted the limited number of people involved directly to inform them of the incident and provide them with assistance".