Science & Tech · Cybersecurity · 3 hrs ago
Revolve says data breach affected more than 1.5 million people
Revolve says 1,515,073 people were affected by a data breach at the online fashion retailer.
The company disclosed the breach on October 29, after an unauthorized party entered some of its systems, including its online shopping platform, on September 11.
Revolve became aware of the intrusion on September 29.
The exposed information may include names, addresses and card details of customers who saved a payment method in their accounts.
Earlier notices to regulators in five other states covered about 197,000 people combined.
Revolve reported the attack to federal law enforcement and brought in outside cybersecurity experts to help respond.
The company has not said how the intruder got in, and no hacker group has publicly claimed the attack.
Revolve said a data breach affected 1,515,073 people.
The online fashion retailer reported the total to the Indiana Attorney General’s Office.
The company said an unauthorized party accessed some of its systems, including its e-commerce platform.
The exposed information may include names, contact details, card numbers and card expiration dates.
The exposure was limited to shoppers who chose to store a payment method in their online accounts.
- Who
- Online fashion retailer Revolve and the people affected by the breach.
- What
- An unauthorized party accessed some of Revolve’s systems. The breach affected 1,515,073 people.
- When
- The intrusion occurred on September 11. Revolve disclosed it on October 29.
- Where
- Some of Revolve’s systems, including its e-commerce platform.
- Why
- The company said the intruder may have used automated means to collect customer information. How the intruder gained access is not stated.
This story does not have two clearly opposing sides.
An unauthorized party broke into some of Revolve’s systems, including its e-commerce platform.
Revolve became aware of the intrusion.
Revolve disclosed the incident in a filing with the US Securities and Exchange Commission and began sending notification letters around the same time.
SecurityWeek reported that Revolve told the Indiana Attorney General’s Office 1,515,073 people were affected.
- People affected
- 1,515,073
- Date of intrusion
- September 11
- Date Revolve became aware
- September 29
- Disclosure date
- October 29
- Systems accessed
- Some Revolve systems, including its e-commerce platform
- Exposed payment details
- Card numbers and expiration dates
What people are saying
automated means