Revolve Data Breach Exposes Data of Over 180,000 People
Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was compromised in a recent data breach.
Radwan AbdulhadiEditor and technology writer
Incident Overview and Discovery
Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was stolen during a recent data breach. According to details covered by SecurityWeek, the security incident occurred on September 11 and involved unauthorized access to several internal systems, most notably the company’s online shopping platform.
Immediately after detecting the unauthorized activity, Revolve initiated its incident response protocols to contain and remediate the cyberattack. The fashion retailer also notified law enforcement agencies and retained an external cybersecurity company to assist with the ongoing remediation and investigation efforts.
Compromised Customer Data
The company’s internal investigation into the breach revealed that hackers may have successfully accessed and exfiltrated specific types of customer information. The exposed data includes the names, physical addresses, payment card numbers, and payment card expiration dates belonging to customers who chose to save their payment details directly to their accounts on the e-commerce platform.
Last week, Revolve commenced the process of reaching out to all potentially affected individuals to inform them of the security event. Regulatory filings submitted to the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont show that the retailer has sent formal notification letters to at least 179,259 people.
Company Impact and Regulatory Filings
Despite the scope of the exposure, Revolve has maintained that the cyberattack has caused minimal disruption to its daily operations. In a formal filing submitted to the US Securities and Exchange Commission, the company provided further details regarding the business implications of the event.
“This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve stated in its regulatory filing. The fashion retailer has not publicly shared the exact total number of impacted individuals, nor has it disclosed specific details regarding the threat actors responsible for the attack or the exact method used to breach its systems.
Customer Guidance and Next Steps
As part of its response notifications, Revolve is currently not providing affected individuals with complimentary identity theft protection or credit monitoring services. Instead, the company is strongly urging impacted customers to carefully review their financial account statements and remain exceptionally vigilant for any potential signs of fraud or identity theft.
Security analysts continue to monitor the retail sector for related vulnerabilities, as data breaches affecting e-commerce platforms remain a persistent threat. Organizations across various industries have faced similar challenges recently, highlighting the ongoing necessity for robust digital defenses against unauthorized access.
Sources
- SecurityWeekRevolve Data Breach Impacts at Least 180,000 People
Continue chronologically
Related stories
Capcom Discloses Data Breach Impacting Millions of Users
Japanese gaming giant Capcom has suffered a data breach exposing over 11 million email addresses and account details via unauthorized access.
Cybersecurity Roundup: Anthropic Breach Dispute and Server Flaw
A weekly cybersecurity roundup details an Anthropic breach dispute, a critical 16-year-old UEFI server flaw, and an AI data leak at Cloudflare.
ASOS Confirms Cyberattack After Rogue In-App Notifications
British online retailer ASOS confirms a data breach following unauthorized push notifications sent to users via a compromised third-party platform.
Meta Reports GitHub Breach Involving Code and Personal Data
Meta is notifying approximately 1,500 individuals after hackers used stolen employee credentials to access GitHub repositories, taking software code and data.
