Revolve Data Breach Exposes Personal Info of Over 1.5 Million Shoppers
Online fashion retailer Revolve has been hit with a significant data breach, exposing sensitive information of over 1.5 million customers. The company disclosed the incident on October 29 in a filing with the US Securities and Exchange Commission (SEC), but only recently revealed the full extent of the impact.
According to an update provided by Revolve to the Indiana Attorney General’s Office, the data breach affected approximately 1,515,073 individuals who had stored payment information in their online accounts. The exposed data includes customers’ names, contact details, mailing addresses, and card numbers along with expiration dates.
It appears that the hackers exploited automated means to collect this sensitive information from Revolve’s e-commerce platform. Revolve has not publicly disclosed how the unauthorized party breached its systems, but it did report the attack to federal law enforcement and enlisted external cybersecurity experts to aid in its response.
This latest data breach highlights the ongoing threat posed by cyber attackers who are increasingly using automated tools to gather sensitive information from online platforms. It’s essential for businesses like Revolve to prioritize robust security measures to prevent such incidents, including regular system audits, employee education on phishing and social engineering tactics, and timely reporting of any suspected security breaches.
The exposure is limited to customers who chose to store payment methods in their accounts, which could potentially lead to financial losses if stolen card information is used for unauthorized transactions. Revolve has started sending notification letters to the affected individuals, but it remains unclear what steps the company will take to prevent similar incidents in the future.
As more data breaches come to light, it’s crucial for consumers to stay vigilant and monitor their accounts closely for any suspicious activity. By doing so, they can help mitigate the financial impact of such incidents and avoid becoming victims of identity theft or other malicious activities.
Source: SecurityWeek — 2026-11-09