2026 Revolve — saved payment card numbers and expiry dates may have been taken; Texas filing lists 127,200 residents
Data compromised
Name, contact information, payment card number and payment card expiration date for "certain customers" who saved payment information in their online shopping accounts. The company says the data "may have" been obtained. It has not stated the total number of customers. State filings list 127,200 people in Texas and 1,328 in Vermont.
Technical writeup
The 8-K was filed under Item 8.01 on October 29, 2026. It states the company "recently became aware of unauthorized access to certain of its systems" and says the activity was remediated. The filing does not mention security codes, passwords or other account data.
Root cause
Intruders accessed several company systems and used "automated means" to obtain customer data, according to the company's SEC filing. The company notified federal law enforcement and hired outside cybersecurity experts. The filing does not say when the access began or was detected.