Revolve discloses breach involving customer payment information
Revolve says an unauthorized actor may have obtained customer and saved payment information; the company has remediated the unauthorized activity.
Online retailer Revolve has disclosed unauthorized access to systems associated with its e-commerce platform. The company says it initiated incident response and remediated the unauthorized activity.
According to its securities filing, an unauthorized actor may have obtained names, contact details, payment card numbers and card expiration dates for some customers who saved payment information in their accounts. The wording describes a potential exposure affecting a subset of customers, not proof that every customer record was taken.
The company says it notified federal law enforcement and engaged external cybersecurity specialists. It also reported that the incident had not interrupted customer service or caused operational disruption.
The company has started notifying potentially affected individuals. It has not publicly shared the full number of impacted customers or disclosed who carried out the intrusion. SecurityWeek reports that notification letters remind recipients to review account statements and remain alert for fraud or identity theft.
Sources
- FORM 8-KPrimaryRevolve Group
- Revolve Data Breach Impacts at Least 180,000 PeopleSupportingwww.securityweek.com
If something here is wrong, tell us. Every correction is listed on the corrections page.
Don’t Just Read About Cyberattacks. Learn How They Work.
Go beyond the headlines. Explore hands-on cybersecurity labs, understand real-world vulnerabilities, and build practical security skills with HackZoneLabs.
Start Learning
