Investigating

Revolve reports possible card-data acquisition

On September 11, 2026, an unauthorised actor accessed the shopping platform and may have acquired names, addresses, card numbers and expiry dates.

Last updated: 2026-11-09

Overview

Affected data determined September 29; law enforcement notified. No total is given.

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

California AG data breach report: Revolve Group, Inc.California Department of Justice, Office of the Attorney General · 2026-11-09
Sample consumer notice filed with California AG (Revolve Group, Inc.)California Department of Justice, Office of the Attorney General · 2026-11-09