Revolve Says Customer Payment Card Data Was Stolen; Reported 1.5 Million Affected Is Unconfirmed
Summary
Revolve said customers’ saved card numbers and expiration dates were stolen, along with names and contact information. A Texas filing lists 127,200 affected Texans; a separate total of 1,515,073 has not been confirmed by Revolve.
Key points
- Revolve said the incident involved customer names, contact information, payment card numbers, and expiration dates.
- The incident affected customers who had saved a payment card in their Revolve account.
- A Texas filing lists 127,200 affected Texans. A figure of 1,515,073 appeared in data returned by the site, but Revolve has not confirmed that total.
- Revolve said an unauthorized actor may have obtained the data through automated means; the company has not explained how access occurred.
- Texas records indicate the incident occurred on September 11 and was discovered on September 29. No group has publicly claimed responsibility.
- Revolve said it took additional security measures but did not specify them. The article advises affected customers to monitor statements and contact their card issuer about suspicious charges or replacement cards.
Article Details
- Victim Organization
- Revolve Group
- Incident Type
- Payment card data breach and theft
- Incident Date
- 2026-09-11
- Data Types Exposed
- Customer names
- Addresses
- Contact information
- Payment card numbers
- Card expiration dates
- Affected Records
- 1,515,073 people is an unconfirmed figure from data returned by the Texas Attorney General website; the public listing does not display that total. The listing reports 127,200 affected Texans. Revolve has not confirmed a nationwide total.
- Operational Impact
- Revolve said it took extra security measures after the breach but did not specify them. No other operational impact was reported.
- Ransom Or Extortion
- No ransom or extortion activity was reported. No group publicly claimed responsibility for the theft.
- Claim Status
- confirmed