I am guessing that you are the author of this blog post. For a long term user, you seem to have made a lot of assumptions and mistakes. You also seem to have a few cards on your account. I can't tell if you froze ALL of your cards, either immediately upon discovering the fraudulent event or before raising/disabling limits and then 'deal' with the rogue virtual card afterwards.
Revolut is a pre-paid card. You can't expect expect the same level of protection or consumer rights, which are provided by a Credit Card or a bank registered in your jurisdiction.
Regardless, you should post this in the Revolut community for more visibility and probably get an actual resolution, before jumping on the GDPR angle ─ which will fail to provide with you enough details, as most financial institutions will redact any information on fraudulent transactions ─ stating in some vague language that it is an on-going fraud/crime investigation, hence they are not allowed to discuss it etc.
Good luck.