Revolve Says Hackers Stole Customers' Payment Card Data
The online fashion retailer told the SEC that intruders reached several systems. Filings with state regulators show 127,200 affected people in Texas alone.
Online fashion retailer Revolve has warned investors that cybercriminals obtained payment card numbers and expiration dates from its customers.
The company filed an 8-K report with the Securities and Exchange Commission on Thursday. It said hackers gained access to multiple company systems. An initial investigation found that the attackers used "automated means" to collect names, contact information, card numbers and card expiration dates. The data belonged to customers who had saved payment details in their online shopping accounts on Revolve's e-commerce platform.
Response and impact
Revolve said it has notified federal law enforcement agencies. It has also hired a cybersecurity firm to lead the recovery effort.
The attack caused no operational disruptions, according to the filing. Revolve said it does not expect a material financial impact from the incident.
Revolve did not say when the attack took place or how many people in total were affected.
On Friday, Revolve told Texas regulators that 127,200 residents had data stolen. Vermont accounts for another 1,328 victims, and notifications were filed in Massachusetts too.
About the retailer
Revolve describes itself as "the next-generation fashion retailer for Millennial and Generation Z consumers". It has served as a fashion retailer for more than 1,600 brands and sells apparel, footwear and accessories. In its last fiscal quarter it reported $347.4 million in net sales.
Payment card data held by fashion retailers remains a target for cybercriminals. Asos, Levi Strauss, Foschini Group, Mango, North Face, Harrods, M&S and The Co-op have all faced cyberattacks over the last two years.
Source: The Record