Revolve Confirms Hackers Stole Saved Payment Card Details From Customer Accounts

Online fashion retailer Revolve has warned investors that cybercriminals accessed multiple company systems and took payment card numbers and expiration dates. In a filing with the US Securities and Exchange Commission on Thursday, the company said an initial investigation found the attackers used "automated means" to collect data from customers who had saved their payment information in an online shopping account. The stolen data also included names and contact information. Revolve did not say when the attack happened.

The company has notified federal law enforcement and hired a cybersecurity firm to lead recovery. It reported no operational disruptions and said it does not expect a material financial impact. Revolve did not say how many people were affected overall. However, it told Texas regulators that 127,200 people in that state had information stolen, and another 1,328 victims are in Vermont. Breach notifications were also filed in Massachusetts.

The report notes that payment card data held by fashion retailers remains a valued target for criminals. Large brands including Asos, Levi Strauss, Foschini Group, Mango, North Face, Harrods, M&S and The Co-op have all faced cyberattacks over the last two years. For any business that lets customers store card details online, the incident is a reminder that saved payment information can become a prime target.