Italy Investigates Government Email Breach Linked to Revolut Data Leak

Italian authorities have launched an investigation into a government email breach linked to a leak of customer data from Revolut. Hackers allegedly exploited the compromised email account to access sensitive client information. Revolut confirmed it reported the incident to law enforcement and is cooperating, while affirming the security of its systems and customer funds.
Investigation and Involved Authorities
Italy’s cybercrime police, Polizia Postale, is probing unauthorized access and computer fraud connected to a hacked government email account used to obtain Revolut customer data.
According to Italian agency ANSA, the compromised account likely belonged to the Prefecture of Reggio Calabria, which later denied sending any requests to Revolut. Revolut declined to disclose the involved government agency due to an ongoing police investigation and confidentiality obligations.
Technical and Legal Context
The breached government email was part of Italy’s Posta Elettronica Certificata (PEC) system, a certified email service that provides legal equivalence to registered mail. However, Italy’s cybersecurity agency CERT-AGID warned in June 2026 that while PEC certifies message delivery, it does not guarantee content security.
CERT-AGID reported handling over 650 cases of abused or illicit PEC accounts since early 2026, highlighting systemic security challenges within this infrastructure.
Why it matters
This investigation highlights vulnerabilities in government electronic communication systems, particularly the widely used PEC service, which while legally recognized, does not ensure full data protection. The successful breach of a government email account linked to the Revolut customer data leak raises critical concerns about the security and confidentiality of channels used by public institutions. Addressing these issues is vital for preventing similar incidents and bolstering trust in digital services at both governmental and financial sectors.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗