Revolut says no direct demand received over alleged data breach

Italian authorities are probing a government email breach allegedly linked to the recent leak of Revolut customer data. The cybercrime police, Polizia Postale, is investigating the incident for unauthorized access to a computer system and computer fraud. The compromised account, reportedly belonging to the Prefecture of Reggio Calabria, was part of Italy's Posta Elettronica Certificata (PEC) system, which provides legally binding email services.

However, the cybersecurity agency warned that PEC does not ensure the security of a message's content. Revolut declined to name the government agency whose email was allegedly compromised, citing an active police investigation and confidentiality obligations. The company assured that their systems, databases, and customer funds remained secure.

Revolut reported the breach to Italian authorities and offered assistance. In June, cybersecurity agency CERT-AGID warned of over 650 cases involving abused or illicit PEC accounts since the beginning of 2026.