Breaches and incidents
Revolve Group (US online fashion retailer): saved payment card data taken from customer accounts
Revolve’s 8-K says it “recently became aware of unauthorized access to certain of its systems” and an actor “may have obtained” the name, contact...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Revolve’s 8-K says it “recently became aware of unauthorized access to certain of its systems” and an actor “may have obtained” the name, contact information, payment card number and expiration date of customers who saved payment information to their online accounts. The Record reports state filings of 127,200 people in Texas and 1,328 in Vermont, plus notices in Massachusetts.
- Root cause: per the 8-K the data was obtained “through automated means”; no specific vulnerability was described.
- No attacker named.
- Revolve says it remediated the activity, notified federal law enforcement, engaged external experts, and does not expect a material impact or operational disruption. (The lead’s spelling “Resolve” is The Record’s URL slug; the company is Revolve.)