Revolve says September breach affected 1.5 million people
Nov 9, 2026 · Summarized by Fundy Tech from SecurityWeek
Revolve told Indiana regulators that 1,515,073 people were affected by its September breach. The company says attackers accessed systems including its e-commerce platform and may have taken names and payment details.
Key points
- Revolve disclosed the incident on October 29 in an SEC filing.
- The breach began on September 11 and was noticed on September 29.
- Stored card numbers and expiration dates may have been exposed.
Why it matters
If you shopped with Revolve and saved a payment method, your information may be involved. The practical concern is card monitoring, password changes, and watching for scam messages tied to the breach. For small businesses, it is another reminder to limit stored payment data and keep customer notices ready.
Who’s affected: Revolve shoppers who stored payment methods
What to do
- Review breach notices from Revolve.
- Watch payment cards used on the site.
- Change any reused passwords.
- Be alert for phishing tied to the incident.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.