Hackers claiming to have breached British fintech Revolut demand about $3 million and set a 24-hour deadline, warning they will sell confidential customer information if the firm does not pay, the Financial Times reports. The group says it has data covering hundreds of customers and is seeking payment to prevent it from being circulated to other criminals.

The attackers are reported to be operating under the name “iamnotavillain.” Both outlets describe the same core elements of the threat: a ransom sum in the millions of dollars, a short compliance window, and the publication or resale of customer data as leverage. The reports also indicate that Revolut has not acknowledged receiving the full scope of the claimed breach at the time of reporting, with details still under assessment.

While the accounts agree on the demand and the stated intention to sell data, they focus on different aspects of the incident. PYMNTS emphasizes the ransom figure and the threat to customer data, while the Financial Times frames the situation around the hackers’ conditions and the reported deadline.