What happened
Revolut disclosed on 12 September that it had handed customer data to someone who should never have had it. Around 680 people are affected, twelve of them in Ireland. The categories are about as bad as this gets: full names, dates of birth, occupations, addresses, contact details, passports, driving licences, financial statements and the facial verification images taken for know-your-customer checks.
No cryptography was broken. On the reporting, attackers compromised an Italian government email system and, writing from a legitimate government domain, posed as law enforcement making requests for information about named accounts. They did this over a period of months, and the requests passed Revolut's checks.
On 16 September a group calling itself iamnotavillain published a demand with a twenty-four hour countdown: 6,000 XMR, worth about $3 million that day. The message was that if Revolut did not pay, "all the data will be sold, and the blood will be on your hands." The countdown expired the next day with no public response.
Revolut's position is that it "has not received any direct contact or demand from the individuals or group making these claims," that its systems and customer funds were unaffected, and that it blocked the address used in the requests and notified the government agency involved, law enforcement, data protection bodies and financial regulators.
We are not going to link to the group's site, and nothing here should be read as confirmation that the data it claims to hold is genuine or complete.
The part that should concern Bitcoin holders
One detail in the reporting deserves far more attention than it has had.
The attackers did not pick 680 names at random, and they did not pick the richest Revolut customers generally. They used blockchain analysis to find accounts with significant crypto holdings, and then went after those specific people.
Sit with the order of operations. The public ledger was the targeting system. Bitcoin's transparency, the property that lets anyone audit the supply and verify their own coins without permission, is the same property that let a criminal group build a list of people worth extorting. That is not a flaw in the design. It is the design, working exactly as specified, in a use case nobody wanted.
The second step is the one that actually cost these people their privacy, and it had nothing to do with any chain. It was a compromised email account and a request process that a bank honoured. The on-chain data said "this account is worth attacking." The custodian's files said "and here is his passport, his address and his face."
Pseudonymity on a public ledger plus verified identity at the edges does not average out to partial privacy. It resolves, for anyone who can reach the edge, to no privacy at all.
We have written twice this month about what custody concentration does to Bitcoin's guarantees, most recently on 21 September. The usual formulation is that if you do not hold your keys you do not hold your coins. This is the less discussed half. These customers did not lose their coins. Revolut says funds were untouched. They lost their identity documents and the record of what they own, which for some of them is the more dangerous loss, because it is the one that follows you home.
Why Monero, and not bitcoin
Here is the part that ought to end a certain kind of argument.
A group sophisticated enough to compromise a government mail system, sustain an impersonation campaign for months and screen victims with chain analysis did not ask to be paid in bitcoin. They asked for Monero.
People who extort for a living have the clearest possible incentive to get this right, and they are not confused about the difference. Bitcoin is a permanent, public, globally replicated record of every transfer. The addresses are pseudonyms, and pseudonyms are exactly what chain analysis firms and law enforcement have spent a decade learning to attach to names. A ransom paid in bitcoin creates evidence that gets better with age, because every future deanonymisation is retroactive.
So the ransom leg is the one place the attackers cannot tolerate transparency, and they chose the asset built to remove it. That tells you something true about Bitcoin that its advocates sometimes blur: it is not private. It was never private. Privacy was not among the properties it was built to provide.
What Monero actually hides
Monero's design hides three things that Bitcoin publishes, using three separate mechanisms.
Ring signatures hide the sender. A transaction is signed in a way that proves one member of a set authorised it without revealing which. The ring size is currently fixed at sixteen, so each real input sits among fifteen decoys drawn from the chain.
Stealth addresses hide the recipient. The sender derives a fresh one-time address for each payment, so a published Monero address never appears on the chain and two payments to the same person cannot be linked by their destination.
RingCT hides the amount. The value is committed to cryptographically and accompanied by a range proof showing it is positive and that inputs balance outputs, without the number itself being visible.
The practical effect is that the three fields a chain analyst works with on Bitcoin, who paid, who received, how much, are all absent by default rather than by opt-in. That default matters more than the cryptography: a privacy feature that most users do not turn on mostly identifies the ones who do.
What Monero does not hide, and what it is up against
We are not going to tell you it is untraceable, because that is a marketing claim rather than a finding.
The protections are statistical, not absolute. Decoys are drawn by an algorithm, and an adversary who can bias what enters the chain, or who can correlate the timing and structure of transactions, chips away at the set of plausible signers. Published analysis by the project's own researchers describes attacks that use consolidation patterns to narrow candidates. Nothing in the design protects the network layer either: running well-connected nodes to harvest the IP addresses that first broadcast a transaction is a documented technique, and it sidesteps the cryptography entirely by attacking the plumbing. The fixed-ring weakness is understood well enough that the project's answer to it, a full-chain membership proof that would replace rings with a proof over the entire output set, is in development and has not shipped.
Governments have been buying against it for years. After offering a bounty of up to $625,000 in 2020 for tools to trace privacy coins, the IRS contracted Chainalysis and Integra FEC to work on the problem. Treat confident claims in either direction with suspicion: the firms selling tracing have an interest in overstating what they can do, and the community has an interest in understating it.
Then there is the boring constraint that may matter most here. Monero's entire market is small: about $10.6 billion of capitalisation and roughly $144 million of trading across all venues in a day. Six thousand coins are worth about $3.4 million today, which is a meaningful share of one day's global volume for an asset that regulated European venues have already dropped. Binance, Kraken and OKX removed it for EU customers ahead of Article 79 of the EU's anti-money-laundering regulation, which bars crypto-asset service providers from anonymity-enhancing coins and applies from 10 July 2027. Much of the coverage of that deadline says 1 July; the regulation says the tenth.
None of that stops anyone holding or moving Monero. It does mean that converting several million dollars of it into spendable money, without touching a venue that performs identity checks, is a harder problem than acquiring it.
What we take from it
Three things.
First, the demand is now worth more than it was. Monero traded near $507 on the day of the ultimatum and near $566 as we publish, so 6,000 coins have gone from roughly $3.0 million to roughly $3.4 million while the deadline lapsed. That is a detail about the asset, not about the crime, but anyone modelling ransom economics should notice that denominating in a volatile asset cuts both ways.
Second, the failure here was a process, not a protocol. A bank answered requests that looked official and were not. Every institution that holds identity documents and answers law enforcement runs the same process, and the interesting question is how many of them would have caught it.
Third, and this is the one we would keep: the attack used Bitcoin's openness to find people and Monero's opacity to get paid. Both worked as designed. If you have been told that holding bitcoin through a regulated intermediary gives you the best of both worlds, this is the week that claim got tested, and the people named in that file are the ones who paid for the test.
This is general market commentary, not investment advice or a recommendation to buy or sell any asset.