Revolve Says 1.5 Million People Affected by Data Breach
Summary
Revolve told Indiana that 1,515,073 people were affected by a breach. The company says an intruder accessed some systems, and may have collected customer contact and payment-card details; the entry method remains unknown.
Key points
- Revolve reported 1,515,073 affected individuals to the Indiana Attorney General’s Office.
- The company says an unauthorized party accessed some systems, including its e-commerce platform, on September 11; Revolve became aware of the intrusion on September 29.
- Revolve says the intruder may have used automated means to collect customers’ names, contact information, mailing addresses, card numbers and expiration dates.
- The exposure concerns shoppers who stored a payment method in their online accounts.
- Revolve reported the incident to federal law enforcement and brought in external cybersecurity experts; the company has not explained how the intruder gained access.
Article Details
- Victim Organization
- Revolve
- Incident Type
- Data breach involving unauthorized access to company systems, including its e-commerce platform
- Data Types Exposed
- Names
- Contact information, including mailing addresses
- Payment card numbers
- Payment card expiration dates
- Affected Records
- 1,515,073 individuals
- Operational Impact
- Unauthorized access affected some systems, including the e-commerce platform. Other operational effects were not reported.
- Ransom Or Extortion
- No hacker group had publicly claimed the attack; no ransom or extortion activity was reported.
- Claim Status
- confirmed