Online fashion retailer Revolve has disclosed a cyber incident in which hackers accessed sensitive payment card information, including card numbers and expiration dates, affecting approximately 127,200 customers in Texas alone. The company filed an 8-K report with the Securities and Exchange Commission (SEC) detailing the breach, which involved unauthorized access to multiple company systems.
While Revolve did not specify the timing of the attack, it indicated that an initial investigation revealed that the threat actors employed “automated means” to extract customer data from accounts where payment information was saved. This included names, contact details, and payment card specifics from users of its e-commerce platform.
In response to the breach, Revolve has notified federal law enforcement and engaged a cybersecurity firm to assist with recovery efforts. The company stated that there were no operational disruptions resulting from the incident and that it does not anticipate any material financial impact. However, the breach has raised concerns about the security of payment card information, a persistent target for cybercriminals.
In addition to the 127,200 affected individuals in Texas, Revolve reported that 1,328 victims are located in Vermont, with breach notifications also filed in Massachusetts. The incident underscores the ongoing risks faced by retailers, as high-profile brands like Asos, Levi Strauss, and others have similarly experienced cyberattacks in recent years, highlighting the vulnerability of payment card data.
Founded in 2023, Revolve has quickly positioned itself as a key player in the fashion retail market, serving over 1,600 brands and reporting $347.4 million in net sales in its last fiscal quarter. As the investigation continues, the company is likely to face scrutiny regarding its data protection measures and the effectiveness of its cybersecurity protocols.
For further details, see the report by The Record.
