Revolve says attackers obtained saved payment-card data

Fashion retailer Revolve said in an October 29 SEC filing that an unauthorized actor may have used automated means to obtain names, contact information, payment-card numbers and expiration dates for customers who saved payment details in online shopping accounts. The company did not disclose how the actor entered its systems or how many customers were affected nationwide.

Revolve said it remediated the unauthorized activity, added security measures, hired outside cybersecurity experts and notified federal law enforcement. It reported no service disruption and said it did not expect a material business impact. State notices list 127,200 affected Texas residents and 1,328 in Vermont. Those are jurisdiction-specific counts, not a confirmed national total.