Another PayPal, another decade.
This would also never have happened if the message said anything more than "you've reached the limit". Even the mention of amount would have made me immediately suspicious. As it happened, I just didn't think of fraud, or know which card hit the limit, so I just went absent-mindedly fiddling with them.
You're in Greece? Under the GDPR they're legally required to give you all the data they have on you; this is non-negotiable. I hope you included that in your complaint.
As for the rest, I guess they're just garbage and I'm glad to know I don't ever want to be using their services. Maybe someone from Revolut will chime in here and try to explain the situation.
To play devil's advocate: they might argue that the fraudulent transaction contains/might contain PII of the fraudster and they are protecting his privacy. Sounds crazy, but I wouldn't be that surprised.
All the fraudulent transaction has is amount/merchant/date and card, it doesn't have any of the fraudster's info on it.