The short version: Revolve, an online clothing store, says someone without permission may have taken card details that some shoppers saved in their Revolve accounts. With a card number and expiration date, someone can try to shop with your card or make a fake message look real. If you saved a card on Revolve, ask your bank or card company for a new card number today.
What happened
Revolve Group described the problem in a report to the US Securities and Exchange Commission, which watches over the stock market. The report, called an 8-K, is dated 29 October 2026.
Revolve says someone without permission “may have obtained, through automated means, the name, contact information, payment card number and payment card expiration date” of “certain customers who saved payment information” in their account.
Revolve says it “confirmed the unauthorized activity was remediated” (dealt with). It also says it “notified federal law enforcement authorities”.
In a letter to the Iowa Attorney General, Revolve said someone got into its online shopping platform on 11 September 2026. Revolve’s letter gives a number for questions: 888-517-6458.
Revolve reported 127,200 affected people in Texas to the Texas Attorney General, according to its data breach listing. Revolve told the Texas Attorney General it has notified affected Texans by US mail and on a website. The listing says these details may change.
Who is affected
Revolve customers who saved payment information in their online shopping account.
What we do not know yet
- How many people are affected in total.
- Whether shoppers outside the US are affected.
Do this today (step 1 takes about 5 minutes)
- Our advice: ask for a new card number (about 5 minutes, our estimate). Call the number on the back of your card, or use your bank’s app.
- Our advice: check your recent statements (about 5 minutes, our estimate). Look for purchases you do not recognize.
- Our advice: expect scam messages about this breach. For example, “Revolve refund” or “your card was compromised”. Do not click links or call numbers in them. Contact your bank only with the number on your card or in its app. Go to Revolve only by typing revolve.com yourself.
- Our advice: do not give a one-time code, PIN or password to someone who contacted you. A one-time code is a short code sent to you to sign in or pay. Stop, and contact your bank using the number on your card.
To report fraud: if you see purchases you did not make, tell your bank or card company right away. You can also report fraud to the US Federal Trade Commission at ReportFraud.ftc.gov.
Sources
- Revolve Group, Form 8-K dated 29 Oct 2026 (SEC EDGAR filing date 30 Oct 2026) (official; data list, “remediated”, “notified federal law enforcement authorities”): https://www.sec.gov/Archives/edgar/data/1746618/000119312526439022/rvlv-20261029.htm
- Texas Attorney General, Data Security Breach Reports (official; 127,200 Texans, notice by US mail and on a website; details may change): https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage
- IdentityTheft.gov, “What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach”, section “Debit or credit card number” (official; new card, check transactions, use the number on your card): https://www.identitytheft.gov/databreach
- Revolve Group, letter to the Iowa Attorney General, 29 Oct 2026, with sample customer letter (official; date of unauthorized access, 11 September 2026; question line 888-517-6458): https://www.iowaattorneygeneral.gov/media/cms/10292026_Revolve_Group_Inc_5294572008117.pdf
- FTC, ReportFraud.ftc.gov (official): https://reportfraud.ftc.gov/
Checked: 1 Nov 2026, against Revolve Group’s 8-K as read at 14:05 Paris time, the Texas Attorney General’s listing as read at 14:11 Paris time, and Revolve’s letter to the Iowa Attorney General as read at 14:14 Paris time. This entry will change if Revolve publishes more. Our disclosure: SafeinAI has no affiliate links and earns nothing from the sites or tools named on this page. If this ever changes we will say so here, on this page.
Leave a Reply