cyber
confidence high
sentiment negative
materiality 0.65
Revolve discloses breach; customer names and payment card numbers may have been accessed
Revolve Group, Inc.
- Revolve became aware of unauthorized access to certain systems and said the activity was confirmed remediated; no discovery date given.
- Unauthorized actor may have obtained, via automated means, name, contact info, payment card number and expiration date for customers who saved payment details.
- Company says the incident caused no operational disruption or service interruption and does not expect a material impact on its business as of Oct. 29, 2026.
- Revolve notified federal law enforcement and engaged external cybersecurity experts; it says it implemented enhanced security measures.
- CFO Jesse Timmermans signed the report; company flagged ongoing-assessment, legal, regulatory and reputational risks in forward-looking language.