Revolve Data Breach Impacts at Least 180,000 People

Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was stolen in a data breach.

The incident occurred on September 11 and involved unauthorized access to certain systems, including the company’s online shopping platform.

Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity.

The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform.

“This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission.

The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts.

Advertisement. Scroll to continue reading.

Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people.

The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft.

Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds.

Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

Related: Over 41,000 DHS Employee Records Leaked Online

Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

Related: Genesys Hack Exposes Customer Data From Internal Systems