Revolve Data Breach: What Was Taken and What to Do

Fashion retailer Revolve disclosed in October 2026 that card details were taken from customers who saved payment information. Here are the facts and the steps to take.

1. The disclosure

Revolve filed an SEC Form 8-K on October 29, 2026 saying hackers gained access to multiple company systems.

2. What was taken

Names, contact information, payment card numbers and expiration dates, from customers who saved payment information in their accounts.

3. How many

Revolve hasn't given a total. It told Texas regulators 127,200 residents were affected and Vermont 1,328; notices were also filed in Massachusetts.

4. If you shop there

Check your card statements, ask your bank for a replacement card, and be wary of emails or texts about the breach that ask you to click.

5. The lesson

Saved cards are convenient but are what attackers collect. Use your phone's wallet or a virtual card number where you can.

Sources

Revolve SEC Form 8-K (October 29, 2026) and The Record (October 30, 2026).

FAQ

Was the security code (CVV) taken?

Revolve's filing lists card numbers and expiration dates; it does not mention security codes.

I never saved a card. Am I affected?

The filing says the card data came from customers who saved payment information.