Revolve Group, Inc., the company behind the popular online fashion retailers Revolve and FWRD, has notified customers that a data breach exposed personal and payment information for a large number of shoppers. State breach filings reveal that at least 197,072 residents in five states were affected.
What information was compromised?
The breach involved names, mailing addresses, payment card numbers and expiration dates. The compromised data belonged to customers who had saved a payment method to their Revolve or FWRD account, allowing the unauthorized actor to retrieve the stored details after gaining access to the online shopping platform on Sept. 11.
State‑by‑state impact
According to the National Consumer Unit’s review of publicly available state breach notices, the breakdown is as follows:
- 127,200 affected residents in Texas
- 46,813 affected residents in Massachusetts
- 17,813 affected residents in South Carolina
- 3,918 affected residents in Iowa
- 1,328 affected residents in Vermont
Revolve has not released a nationwide total, and not all states make breach notices publicly searchable, so the full scope may be larger.
What shoppers should do
Customers who receive a notice are urged to review recent card statements for any unfamiliar charges and to contact their card issuer promptly if they see suspicious activity. Issuers can also provide a replacement card with a new number to protect against further misuse.
In addition, consumers may consider placing a credit freeze. While a freeze does not stop unauthorized charges on an already exposed card, it makes it more difficult for thieves to open new credit accounts using stolen personal information. Credit freezes are free to place and lift, but they must be requested separately with each of the three major credit bureaus—Equifax, Experian, and TransUnion.
Revolve’s response
Revolve has set up a dedicated phone line (888‑517‑6458) for customers with questions about the breach. The line operates Monday through Friday, 9 a.m. to 9 p.m. Eastern Time, excluding major U.S. holidays.
The company says it is working with cybersecurity experts and law‑enforcement agencies to investigate the incident and to strengthen its systems against future attacks.
How to stay informed
The National Consumer Unit continues to monitor data‑security incidents and provides updates through its consumer‑reporting channels. Follow consumer correspondent Allie Jasinski on Instagram, TikTok and YouTube for real‑time information, or email [email protected] with questions.
Original reporting: 40/29 / KHBS (NW Arkansas) — read the source article.
