Italian authorities probe government email compromise connected to Revolut customer data breach
Authorities in Italy are conducting an investigation into suspected computer fraud following reports that hackers exploited a government email account to access customer data from Revolut.
A government email breach connected to the unauthorized disclosure of Revolut customer information is under investigation by Italian authorities, following allegations that cybercriminals exploited the hacked account to access confidential customer records.
The incident is being examined by Polizia Postale, the Italian law enforcement unit specializing in cybercrime, on grounds of suspected unauthorized computer system access and computer fraud, as reported by ANSA, the Italian news agency, on Tuesday.
According to several Italian media outlets, the email account that was compromised belonged to the Prefecture of Reggio Calabria. However, the agency subsequently issued a denial that it had transmitted any requests to Revolut, as ANSA reported.
When asked about the incident, Revolut refused to disclose which government agency's email had allegedly been compromised and utilized to extract customer data, pointing to the ongoing police investigation and confidentiality requirements.
"We reported this to the Italian authorities upon detection and will assist them as needed," a Revolut spokesperson told Cointelegraph, adding that the company's systems, databases and customer funds remained secure.
The breached government email account was allegedly linked to Italy's Posta Elettronica Certificata (PEC) system, a certified email service that gives messages the same legal value as registered mail. Italy's CERT-AGID cybersecurity agency warned in June that PEC certifies delivery but does not guarantee the security of a message's content.
The agency said it had handled more than 650 cases involving abused or illicit PEC accounts since the start of 2026.