Revolve breach: hackers took saved payment card numbers and expiration dates

The online fashion retailer says customers who saved a card in their account had names, contact details, card numbers and expiration dates taken. It hasn't said how many people are affected; it told Texas regulators about 127,200 Texans.

In this brief: 3 sections 2 min read

- Revolve's SEC filing lists name, contact information, payment card number and expiration date for customers who saved payment information in their account. The filing does not mention card security codes. Revolve hasn't said when the access happened or how it got in beyond 'automated means'.
- Revolve has not given a total. Per The Record, it reported 127,200 affected people to Texas regulators and 1,328 to Vermont. Notices were also filed in Massachusetts without a count.
- Check card statements for charges you don't recognize and report them to your issuer; cardholders generally aren't liable for fraud reported promptly. Consider asking for a replacement card. Remove saved cards from shopping accounts you rarely use. Be wary of emails or texts about Revolve orders or refunds.

Read full analysis on sec.gov

Useful?