- Trending
- Comments
- Latest
A UK crypto investor says intruders held knives to their face and stole about $760,000 in digital assets, and cybersecurity researchers suspect data stolen in September’s Revolut breach may have pointed the robbers to their door.
The victim described the alleged robbery in a post on X, formerly Twitter, claiming that intruders restrained them, threatened them with knives and took cryptocurrency, a luxury watch and a mobile phone. The reported losses included approximately $40,000 from the victim’s main cryptocurrency wallets and $720,000 from a Ledger hardware wallet.
“Three knives to my face saying they were gonna kill me, $40k from my main wallets $720k from one of my ledgers, rolex, took my phone and smashed it up,” the victim wrote on X.
Although the circumstances surrounding the attack have not been independently established in the supplied report, researchers at cybersecurity firm Hudson Rock have identified a possible connection between the incident and customer information allegedly stolen from Revolut.
The suspected link highlights a growing security concern: data breaches can create risks that extend beyond financial fraud and into the physical safety of affected individuals.
Hudson Rock flagged the potential connection on October 13, warning that compromised banking information could give criminals the information needed to identify wealthy cryptocurrency investors and locate their homes.
According to the cybersecurity firm, the combination of residential addresses and financial profiles could allow attackers to select targets based on their apparent wealth. Such information could be particularly valuable to criminals seeking to move beyond online theft and carry out extortion, intimidation or physical robbery.
“Threat actors now have access to exact physical addresses alongside financial profiles. This creates a highly targeted hit list for physical extortion and robbery,” Hudson Rock researchers said.
The concern is that criminals may no longer need to identify wealthy cryptocurrency holders through extensive online surveillance if stolen customer records already connect individuals to their addresses and financial activity.
Cryptocurrency investors can hold substantial amounts of digital assets without those holdings being publicly visible in conventional banking records. However, information about large transactions, combined with identity verification documents and residential details, could help criminals narrow their search for potential victims.
In this case, the alleged robbery has prompted questions about whether information exposed in the Revolut data breach could have contributed to the victim being targeted. The available information does not establish that the attackers obtained the victim’s records from the breach or used them to plan the home invasion.
The incident follows a reported security breach involving Revolut, the UK-founded financial technology company, in September 2026.
According to the original Cybernews report, attackers allegedly obtained customer information after submitting a fraudulent request using an email account belonging to an Italian government employee. The account was reportedly used to send requests that appeared to originate from an official European investigative process.
The attackers allegedly submitted large numbers of cryptocurrency transaction identifiers through fraudulent European Investigation Orders (EIOs), requesting personal information associated with the accounts. Revolut reportedly treated the requests as legitimate and supplied hundreds of files containing sensitive customer information.
The threat actor claimed that the operation lasted approximately six months. The stolen information reportedly included Know Your Customer (KYC) records associated with customers across Europe, including individuals linked to high-value cryptocurrency holdings or accounts involved in large transactions.
KYC procedures are used by financial institutions to verify customer identities and comply with financial regulations. Depending on the records collected, these processes can involve names, identification documents, addresses and other personal details.
The attackers reportedly threatened to sell the information unless Revolut paid $3 million. Individual customers were also allegedly offered the option of paying to have their records removed from the dataset.
These claims, including the reported ransom demand and the extent of the compromised records, are attributed to the original reporting and alleged threat actor. They should not be interpreted as independently verified findings about every affected account.
The alleged robbery illustrates the potential consequences when financial information becomes accessible to criminals, particularly for people who hold significant amounts of cryptocurrency.
Hardware wallets such as Ledger devices are designed to keep cryptocurrency private keys offline, reducing exposure to certain forms of remote hacking. However, protecting private keys does not prevent someone from being threatened or physically coerced into surrendering assets.
The victim’s account suggests that the attackers took cryptocurrency-related devices and other valuables during the reported home invasion. The reported $720,000 loss associated with a Ledger wallet underscores how physical security can become a critical concern for investors who hold substantial digital wealth.
Unlike conventional bank transfers, cryptocurrency transactions may be difficult or impossible to reverse once assets have been transferred to an attacker’s address. The exact outcome of the reported theft, including whether the stolen assets can be recovered, was not established in the supplied report.
The suspected connection to the Revolut data breach also raises questions about how financial institutions authenticate requests for sensitive customer information. Fraudulent requests that imitate official investigative procedures can create significant risks if verification systems fail to distinguish legitimate demands from malicious ones.
The alleged use of a compromised government employee’s email account would have allowed the attackers to make their requests appear more credible. Stronger verification procedures, independent confirmation of legal requests and monitoring for unusual patterns could help reduce the risk of similar incidents.
The Revolut data breach and the reported home invasion have drawn attention to a potential connection between digital data theft and physical crime. Hudson Rock’s warning provides a possible explanation for how criminals could identify wealthy cryptocurrency holders, but the evidence presented in the supplied report does not conclusively establish that the breach led to this particular attack.
The victim’s confirmation that they used Revolut, together with online discussions suggesting their information was being offered for sale, has contributed to the suspicion. Nevertheless, investigators would need to verify whether the victim’s information appeared in the compromised dataset and whether the attackers accessed or used it.
The identity of the alleged robbers, the precise method through which they located the victim and the status of any official investigation were not provided in the original material. Revolut’s response to the specific allegations and any confirmation of the reported connection were also not included.
Until further evidence emerges, the incident should be treated as a reported robbery with a suspected, rather than confirmed, link to the data breach.
Seee more: Cybernews
Copyright © 2025 - The Bit Gazette.
