Revolve says data breach affected 1.5 million people
Original title: Revolve Puts Data Breach Victim Count at 1.5 Million
Indiana records put the total at 1,515,073, including stored card numbers and expiration dates for some shoppers.
Online fashion retailer Revolve told the Indiana Attorney General’s Office that 1,515,073 people were affected by a breach disclosed in October. An unauthorized party entered some systems, including the e-commerce platform, on September 11; Revolve learned of it on September 29. The company says automated collection may have taken names, contacts, mailing addresses, and stored card numbers with expiration dates. It has not explained the access method, and no group has claimed the attack.
Unconfirmed: Revolve has not explained how the intruders got in, and no group has publicly claimed the attack.
- An October 29 SEC filing did not include a public victim total.
- Notices in five other states covered roughly 197,000 people combined.
- Only shoppers who stored a payment method online are in scope.
- Revolve reported the attack to federal law enforcement.
Impact: Names, contacts, addresses, and stored card data exposed
- Victims
- Revolve
- Countries
- United States
From the original article
1 min read at securityweek.com
Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1. 5 million individuals. The post Revolve Puts Data Breach Victim Count at 1.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.