Revolve Data Breach Impacts at Least 180,000 People

Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was stolen in a data breach. The incident occurred on September 11 and involved unauthorized access to certain systems, including the company’s online shopping platform. Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity. The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform. “This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission. The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

The incident occurred on September 11 and involved unauthorized access to certain systems, including the company’s online shopping platform. Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity. The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform. “This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission. The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity. The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform. “This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission. The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform. “This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission. The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

“This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission. The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts. Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people. The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft. Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds. Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Related: Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Related: Over 41,000 DHS Employee Records Leaked Online Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Related: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk Related: Genesys Hack Exposes Customer Data From Internal Systems

Related: Genesys Hack Exposes Customer Data From Internal Systems

Ionut Arghire is an international correspondent for SecurityWeek.

More from Ionut Arghire

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

Bulletproof Host Virtualine Loses Its Domain to FBI Seizure

Fresh WordPress Vulnerability in Attackers’ Crosshairs

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities

Over 41,000 DHS Employee Records Leaked Online

HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack

FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Webinar: Agentic Pentesting for a Stronger CTEM Program

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Virtual Event: CISO Forum 2026 Summit

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to practical experience and examine the issues shaping enterprise cybersecurity strategy.

Flipboard Whatsapp Whatsapp Email