Revolve data breach affects 1,515,073 people, exposing names, addresses and stored payment card data
Revolve, an online fashion retailer, told the Indiana Attorney General's Office that 1,515,073 individuals were impacted by the intrusion it disclosed in an SEC filing on October 29. The unauthorized party broke into some of Revolve's systems, including its e-commerce platform, on September 11, and the company became aware of it on September 29. The intruder may have used "automated means" to collect customer names, contact details, mailing addresses, card numbers and expiration dates, and the exposure is limited to shoppers who had chosen to store a payment method in their accounts. Notices sent to regulators in Iowa, Massachusetts, South Carolina, Texas and Vermont covered roughly 197,000 people combined, so the state filings alone do not reflect the full count. Revolve has reported the attack to federal law enforcement, has brought in external cybersecurity experts, and has not yet explained how the intruders got in; no hacker group has claimed the attack. The article does not name a CVE, a vulnerability or any IOCs, so the entry carries no technical indicators.
Linha do tempo
-
Revolve data breach affects 1,515,073 people, exposing names, addresses and stored payment card data
ler a análise desta fonte ocultar
Revolve, an online fashion retailer, told the Indiana Attorney General's Office that 1,515,073 individuals were impacted by the intrusion it disclosed in an SEC filing on October 29. The unauthorized party broke into some of Revolve's systems, including its e-commerce platform, on September 11, and the company became aware of it on September 29. The intruder may have used "automated means" to collect customer names, contact details, mailing addresses, card numbers and expiration dates, and the exposure is limited to shoppers who had chosen to store a payment method in their accounts. Notices sent to regulators in Iowa, Massachusetts, South Carolina, Texas and Vermont covered roughly 197,000 people combined, so the state filings alone do not reflect the full count. Revolve has reported the attack to federal law enforcement, has brought in external cybersecurity experts, and has not yet explained how the intruders got in; no hacker group has claimed the attack. The article does not name a CVE, a vulnerability or any IOCs, so the entry carries no technical indicators.