Revolve breach exposes personal and payment card data of over 1.5 million customers
US online fashion retailer Revolve Group suffered a cyber-attack in September 2026 that exposed customers' personal information and stored payment card data. The attacker used automated methods to access customer accounts, and the affected information included names, contact details, card numbers and expiry dates. The company blocked the unauthorised activity and notified external experts and federal investigators, and later reported to regulators that more than 1.5 million people were affected.
Key facts
- Affected organisation
- Revolve Group
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information and stored payment card data of more than 1.5 million customers
- Cause / method
- Automated unauthorised access to customer accounts
- Location
- United States
If your data was exposed
Exposed dataNameCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- Revolve Group disclosed the possible theft of personal information and payment card data stored in customer accounts.
- It was confirmed that the company had blocked the unauthorised activity and notified external experts and federal investigators.
- Data returned by the Texas attorney general's website showed a total of 1,515,073 affected individuals, but the company did not confirm the overall scale at the time.
- It was confirmed that the company had reported to regulators that more than 1.5 million people were affected by the September cyber-attack.
18 related reports
- Revolve Group warns customers' saved payment card data may have been stolen
- Revolve Says Hackers May Have Taken Saved Payment Card Details
- Revolve Group, Inc. data breach (October 30, 2026)
- Revolve Group reports unauthorized access to customer payment data
- Revolve says hackers stole payment card data from shoppers
- Revolve Data Breach Exposes Saved Payment Cards of 1.5 Million Customers
- Fashion retailer Resolve says hackers stole payment card information
- Revolve says attackers obtained saved payment-card data
- Revolve Discloses Possible Exposure of Customer Payment Card Data
- Revolve Data Breach Impacts at Least 180,000 People
- Revolve Data Breach Impacts at Least 200,000 People
- Revolve reports payment card data breach
- Revolve card breach: 1.5 million people may be affected
- Revolve Group Data Breach Impacts 179K Customers: Financial Data Exposed
- Revolve Data Breach: What to Do if You Got a Letter
- Revolve data breach exposed shoppers' saved card numbers and expiration dates
- Revolve Puts Data Breach Victim Count at 1.5 Million
- News - Revolve data breach exposes personal information of over 1.5 million people
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.