Italian investigators are examining how hackers allegedly obtained Revolut customer data after using a compromised government email account to request information.

What Data May Have Been Exposed

The allegedly stolen material includes passport details, driving license information, other identity documents and photographs. The attackers reportedly claim to have obtained 147 gigabytes of data.

Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram

Exposure of identity records can create risks beyond direct financial losses, including fraud, impersonation and other forms of criminal exploitation.

Investigators Examine How The Attack Worked

Italy’s cybercrime police are investigating the operation, which reportedly unfolded over several months and involved unauthorized access to an IT system of public interest.

Investigators are examining whether the attack originated from a computer at the Reggio Calabria prefecture or Italy’s Interior Ministry. They are also seeking to establish whether the government email account used in the operation was directly compromised or cloned.

The National Anti-Mafia and Counter-Terrorism Directorate has joined the investigation because a government body was involved. Police said several aspects of the operation remain under review.

Data Protection Authorities Coordinate Response

Italy’s data protection authority has launched its own checks and asked data protection officers to review potential security gaps. Identified vulnerabilities are to be reported without delay.

The authority has also contacted its Lithuanian counterpart, where Revolut’s registered office is located, to coordinate information and the response.

Investigators are now focusing on how the intrusion occurred and whether other public institutions were affected.