Hudson Rock links a $800,000 home invasion to the Revolut breach

According to Hudson Rock, a cryptocurrency investor in the U.K. was held at knifepoint, taped up, and robbed of approximately $800,000 in cryptocurrency and physical valuables on October 13th. Hudson Rock is now tracking what it calls the first physical robbery potentially linked directly to a recent Revolut data breach.

The victim first described the robbery on X. When asked directly in a reply whether they banked with Revolut, the victim confirmed they did. That single reply is what ties the robbery to the breach: a victim naming their own bank, not a confirmed statement from Revolut or from investigators.

What the breach gave attackers

Hudson Rock had already reported on the Revolut breach mechanics before this robbery happened. Attackers used a compromised email address on the ‘pec.interno.it’ domain, belonging to the Italian Ministry of the Interior, to approach Revolut's legal department and pose as a government authority requesting customer data. Revolut handed over customer dossiers in response. Those dossiers reportedly included exact physical addresses alongside financial profiles, the two things needed to turn a data breach into a target list for a home invasion.

The credentials behind that government email were not newly stolen. Hudson Rock's cybercrime intelligence database had already logged compromised credentials for the interno.it domain, visible before the Revolut breach took place. That is the part of this story that counts as an outcome rather than just a warning: Hudson Rock is pointing to a specific, checkable fact that existed in its own database ahead of the fraud, and connecting it afterward to a real robbery.

What this changes for a Revolut customer

The sequence here runs in one direction only. A government email account was compromised, the stolen access was used to impersonate a real authority, a bank's legal department accepted that impersonation, and the data it released produced a physical address and a financial profile in the same file. A knifepoint robbery a month later followed the same address and the same financial profile. Each step depended on the one before it; break any single link and the chain stops.

For anyone banking with Revolut, or holding crypto under their own name, the lesson is not abstract. If a data breach exposed a home address next to account details, that exposure is a physical safety question, not just a financial one. Hudson Rock says monitoring whether government email domains used to request customer data appear in infostealer logs would likely have stopped the Revolut breach before it started. That is a check a bank can run on its own incoming requests; a customer cannot run it for them, but can ask whether their bank does.