Revolve, a prominent online fashion retailer, has reported a significant data breach affecting over 180,000 customers. The breach, which compromised personal and payment card information, has prompted the company to issue notifications to those impacted.
Details of the Cyber Incident
The data breach was identified on September 11, when unauthorized access to certain systems, including Revolve’s e-commerce platform, was discovered. The breach involved the exfiltration of sensitive data, such as names, addresses, payment card numbers, and expiration dates of customers who had stored this information on the company’s platform.
Upon learning of the breach, Revolve immediately activated its incident response protocols. The company successfully contained and mitigated the unauthorized activity, ensuring no further data was compromised.
Company Response and Investigation
Revolve has stated that the breach has not disrupted its operations or affected customer service. In a filing with the US Securities and Exchange Commission, the company clarified that it does not foresee any substantial impact on its business due to the incident.
Law enforcement has been notified, and a cybersecurity firm has been engaged to assist with the remediation process. Despite the extent of the breach, Revolve has opted not to offer free identity theft or credit monitoring services but has advised customers to monitor their accounts for any unusual activity.
Customer Notifications and Security Measures
Last week, Revolve began notifying the affected individuals about the breach. Notifications were sent to at least 179,259 people, as indicated by filings with the Attorney General’s offices in several states, including Iowa, Massachusetts, Texas, and Vermont.
The company has not disclosed specific details about the perpetrators or the methods used in the breach. SecurityWeek has reached out to Revolve for further information, and updates will be provided as they become available.
As a precaution, Revolve advises customers to remain vigilant in reviewing their account statements to prevent potential incidents of fraud or identity theft.
This breach underscores the ongoing challenges companies face in safeguarding customer data against increasingly sophisticated cyber threats.
