Fashion e-retailer Revolve breached: card numbers and expiry dates of customers with saved payment data may be stolen, over 1.51 million affected

US fashion e-retailer Revolve said in an SEC 8-K filed Oct 29 that an unauthorized actor accessed its systems and may have obtained, through automated means, names, contact details, payment card numbers and expiration dates of customers who saved payment information in their accounts ^[1]. SecurityWeek reports Revolve told the Indiana Attorney General that 1,515,073 people were affected, with the intrusion on Sept 11 and discovery on Sept 29 ^[2]. Customers who saved payment methods in their Revolve accounts should watch for the breach notification letters, which SecurityWeek says Revolve began sending around the time of disclosure ^[2].

Industries mainly affected: Retail

Customers who saved payment methods in their Revolve accounts should watch for the breach notification letters, which SecurityWeek says Revolve began sending around the time of disclosure ^[2]