11/05/2026

Revolve data breach exposed shoppers' saved card numbers and expiration dates

KMBC News 9

Revolve Group, Inc., which operates the online fashion retailers Revolve and FWRD, is notifying customers that a data breach involved names, addresses, payment card numbers and expiration dates, according to breach notices filed with state officials.

The company said an unauthorized actor accessed its online shopping platform on Sept. 11. The data involved customers who had saved a payment method to their account.

The National Consumer Unit reviewed publicly available state breach notices to assess the scope of the breach. The filings list 127,200 affected Texas residents, 46,813 in Massachusetts, 17,813 in South Carolina, 3,918 in Iowa, and 1,328 in Vermont. Data returned by the Texas attorney general’s site for Revolve’s filing includes a separate field listing 1,515,073 people affected nationwide, though that figure does not appear in the public search results. Revolve has not publicly disclosed a nationwide total. Not all states make breach notices available to search.

Customers who receive a notice should review their card statements and promptly report unfamiliar charges to the card issuer. They can also contact the issuer and ask for a replacement card with a new number.