Italian authorities are investigating a government email breach linked to the exposure of Revolut customer data, after hackers allegedly used a compromised official account to obtain sensitive information.
Polizia Postale Launches Cybercrime Investigation
Polizia Postale, Italy’s cybercrime police unit, has opened an investigation into the incident for alleged unauthorized access to a computer system and computer fraud, according to a Tuesday report from Italian news agency ANSA.
Compromised Account Linked to Prefecture of Reggio Calabria
Several Italian media outlets identified the breached account as belonging to the Prefecture of Reggio Calabria. The prefecture subsequently denied sending any requests to Revolut, ANSA reported.
Revolut Confirms Breach, Says Systems Remain Secure
Revolut declined to name the government agency whose email was allegedly compromised and used to access customer data, citing an active police investigation and confidentiality obligations. A company spokesperson confirmed the incident and outlined the firm’s response:
“We reported this to the Italian authorities upon detection and will assist them as needed,”
The spokesperson added that Revolut’s systems, databases, and customer funds remain secure.
Breach Exploits Italy’s Certified Email (PEC) System
The compromised government email account was reportedly part of Italy’s Posta Elettronica Certificata (PEC) system, a certified email service that gives messages the same legal value as registered mail. Italy’s CERT-AGID cybersecurity agency warned in June that while PEC certifies delivery, it does not guarantee the security of a message’s content.
CERT-AGID Tracks Surge in PEC Account Abuse
CERT-AGID said it has handled more than 650 cases involving abused or illicit PEC accounts since the start of 2026, highlighting a growing threat vector for government and institutional communications.
