The original text is in EN, taken from the source site. Source ↗

Data Breaches

Revolve Data Breach Impacts at Least 180,000 People

Hackers accessed its online shopping platform and stole customers’ personal and payment card information.

By

Ionut Arghire

| November 2, 2026 (9:35 AM ET)

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Online fashion retailer Revolve is notifying at least 180,000 individuals that their personal and payment card information was stolen in a data breach.

The incident occurred on September 11 and involved unauthorized access to certain systems, including the company’s online shopping platform.

Immediately after learning of the cyberattack, Revolve initiated incident response and contained and remediated the unauthorized activity.

The company’s investigation into the incident determined that the hackers may have accessed and exfiltrated the names, addresses, payment card numbers, and payment card expiration dates of customers who saved the data to their accounts on the company’s e-commerce platform.

“This incident has not resulted in operational disruption or interrupted service to any customers, and as of the date of this report, the company does not believe this incident will have a material impact on its business,” Revolve said in a filing with the US Securities and Exchange Commission.

The fashion retailer said it has notified law enforcement and retained a cybersecurity company to help with the remediation efforts.

Advertisement. Scroll to continue reading.

Last week, the company started notifying the potentially affected individuals of the data breach. Based on notices filed with the Attorney General’s offices in Iowa, Massachusetts, Texas, and Vermont, Revolve sent notification letters to at least 179,259 people.

The company is not providing the affected individuals with free identity theft or credit monitoring services, but reminds them to review their account statements and remain vigilant for incidents of fraud or identity theft.

Revolve has not shared the number of impacted individuals or details on who hacked it and how. SecurityWeek has emailed the company for additional information on the data breach and will update this article if it responds.

Related:Chainalysis Discloses Data Breach Following AI-Driven Cyberattack

Related:Over 41,000 DHS Employee Records Leaked Online

Related:Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

Related:Genesys Hack Exposes Customer Data From Internal Systems

Written ByIonut Arghire

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

More from Ionut Arghire

  • PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
  • Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
  • Fresh WordPress Vulnerability in Attackers’ Crosshairs
  • Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
  • TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
  • Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
  • Over 41,000 DHS Employee Records Leaked Online
  • HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Latest News

  • Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
  • Malicious Claude Code Extension Served in Cursor Supply Chain Attack
  • Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
  • Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
  • FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
  • Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
  • Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
  • Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Trending

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations

Malicious Claude Code Extension Served in Cursor Supply Chain Attack

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Fresh WordPress Vulnerability in Attackers’ Crosshairs

Passkeys Are Better Than Passwords. But They Are Not Enough.

Drupal Commerce Core Vulnerability Exploited Against Online Stores

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Business Email*

emailsignupsource

Read our Privacy Policy for more information.

Webinar: Agentic Pentesting for a Stronger CTEM Program

November 4, 2026

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Virtual Event: CISO Forum 2026 Summit

November 10 & 11, 2026

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

General Paul M. Nakasone has joined Armadin’s Board of Directors.

More People On The Move

Expert Insights

*

  • Flipboard
  • Reddit
  • Whatsapp
  • Whatsapp
  • Email

Passkeys Are Better Than Passwords. But They Are Not Enough.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

The Key to AI Software Security Isn’t Speed, It’s Maturity

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)