Revolve Puts Data Breach Victim Count at 1.5 Million
Revolve data breach impacts over 1.5 million individuals.
Online fashion retailer Revolve has disclosed that a cyberattack in September affected 1,515,073 individuals. The breach, which occurred on September 11, involved unauthorized access to systems including the e-commerce platform. The exposed data may include names, mailing addresses, and payment card information for customers who stored payment methods in their online accounts.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Revolve?
Get an email when a new story names Revolve, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonUnauthorized access to Revolve's e-commerce platform in September 2024 exposed the personal and payment card data of over 1.5 million customers, highlighting the severe risks of storing sensitive payment information in online retail environments. The breach demonstrates that e-commerce platforms holding payment card data are high-value targets requiring robust access controls and data minimization practices. Storing full payment card details rather than tokenized references dramatically amplifies the impact of any unauthorized access event. This incident matters because it affects over a million consumers' financial security and exposes Revolve to significant regulatory and reputational consequences under payment card industry and data protection obligations.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.