2026-11-01
Revolve customer account breach: saved card numbers and expiry dates accessed (127,200 Texans listed) — what customers should do
US fashion retailer Revolve disclosed in a US securities filing on October 29, 2026, as reported by The Record, that an unauthorized party used automated means to access customer account data, including names, contact details, and saved payment card numbers and expiry dates. The Texas Attorney General's data breach report lists Revolve Group, Inc. with 127,200 affected Texans, posted on October 30, 2026; the categories are name and financial information such as a credit or debit card number. The Record also reports 1,328 Vermont residents and a Massachusetts filing without a count. Revolve has not published a total across all states in the sources we could read. Whether the card security code (CVV) was involved is not stated in the sources we read. This site's take: if you saved a card on your Revolve account, watch your statements for small unfamiliar charges, ask your card issuer whether to reissue the card, and treat any message that quotes your order history as suspect until you check it yourself.