● Covered by 2 sources · 2 reportsMedium impact2 neutral
Revolve reports payment card data breach affecting customers who saved information
Key points
- Revolve reported a data breach to the SEC.
- Hackers accessed payment card numbers and expiration dates.
- Affected customers had saved payment information online.
- At least 127,200 Texas residents and 1,328 Vermont residents impacted.
- Revolve is notifying at least 180,000 individuals.
- The data breach occurred on September 11.
- Hackers accessed names and addresses.
- Revolve notified law enforcement.
Data Breach Disclosure
Online fashion retailer Revolve informed investors that cybercriminals gained unauthorized access to customer payment card information. The company filed an 8-K report with the Securities and Exchange Commission (SEC) on Thursday, confirming that hackers accessed multiple company systems.
Information Compromised
An initial investigation revealed that threat actors used "automated means" to obtain names, contact information, payment card numbers, and payment card expiration dates. This data belonged to customers who had saved their payment information within their online shopping accounts on Revolve's e-commerce platform.
Response and Impact
Revolve has notified federal law enforcement agencies and engaged a cybersecurity firm to manage the recovery efforts. The company stated that the attack did not cause any operational disruptions and is not expected to result in material financial impacts. While the total number of affected individuals was not disclosed, Revolve reported to Texas regulators that 127,200 people in the state had their information stolen, with an additional 1,328 victims in Vermont. Breach notifications were also filed in Massachusetts.
Context of Retailer Breaches
Payment card information from fashion retailers remains a frequent target for cybercriminals. Several major brands, including Asos, Levi Strauss, and Mango, have experienced cyberattacks involving payment data over the past two years.
Updates
- Revolve is notifying at least 180,000 individuals.
- The data breach occurred on September 11.
- Hackers accessed names and addresses.
- Revolve notified law enforcement.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Online fashion retailer Revolve is notifying at least 180,000 individuals about a data breach that occurred on September 11. Unauthorized access to their online shopping platform resulted in the potential exfiltration of names, addresses, payment card numbers, and expiration dates. Revolve has initiated incident response, contained the activity, and notified law enforcement.
Online fashion retailer Revolve disclosed that hackers accessed payment card numbers and expiration dates from customers who saved their information on the company's e-commerce platform. The incident, reported to the SEC, affected at least 127,200 individuals in Texas and 1,328 in Vermont, with notifications also filed in Massachusetts.