Revolve Group
Disclosed Oct 29, 20261,515,073 affectedConfirmed
Cybersecurity incident disclosed to the SEC (8-K Item 8.01)
(the "Company") recently became aware of unauthorized access to certain of its systems. The Company promptly initiated its cyber incident response protocols and confirmed the unauthorized activity was remediated. The Company proceeded to assess and investigate the scope of the incident and to identify and implement enhanced security measures designed to prevent a similar event from occurring. The Company also notified federal law enforcement authorities and engaged leading external cybersecurity experts to assist with the investigation and response efforts. Based on its investigation, the Comp
What is known
| People affected | 1,515,073 (as reported by the organization) |
|---|---|
| Disclosed | Oct 29, 2026 |
| Discovered | Sep 29, 2026 |
| Happened | Sep 11, 2026 |
| Attack | Hacking |
| Data exposed | NamesPayment cardsFinancial |
| Sector | Retail · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-10-31 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.