Revolve notifies at least 179,259 people of data breach exposing payment card details
Customers who saved card details to their accounts face a fraud risk, and the retailer is not offering free credit monitoring.
Online fashion retailer Revolve has begun notifying at least 179,259 people that their personal and payment card data was taken in a breach that began on September 11. The intruders reached its online shopping platform and may have copied names, addresses, card numbers and expiry dates for customers who had saved those details to their accounts. Revolve says it contained the activity, informed law enforcement and brought in an outside cybersecurity firm, and it has disclosed neither the total number of affected people nor who was behind the attack. It is not offering free identity theft or credit monitoring, only advising affected customers to review their statements for fraud. The company told the SEC it does not expect a material impact on its business, and no service interruption occurred.
Why it matters
For customers who stored payment card numbers and expiry dates on their Revolve accounts, the breach means those details may be in an intruder's hands, and the only guidance offered so far is to review card statements for fraud. Revolve has not offered free identity theft or credit monitoring, so affected people carry that protection cost themselves if they want it. The company has told the SEC it does not expect a material impact on its business and says no service disruption occurred, so the consequence falls mainly on the individuals whose data was taken.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.