Revolve reports 1,515,073 people affected by data breach

Image: Primary

Published Monday, November 9, 2026 · 9:18 PM EST

Revolve has told the Indiana Attorney General's Office that its previously disclosed data breach affected 1,515,073 individuals, SecurityWeek reported. The online fashion retailer had not previously published a total victim count. The company says an unauthorized party entered systems including its e-commerce platform on September 11. The intruder may have used automated methods to collect customers' names, contact information, card numbers and expiration dates. The exposure is limited to shoppers who stored a payment method in their accounts. Revolve disclosed the incident on October 29 and has not explained how the attacker gained access.

Sources

SecurityWeek

Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Infrastructure Products

Two Chinese chip suppliers raise combined $301 million in Hong Kong IPOs

Chip suppliers Suzhou Denglin Technology Co. and Jiangsu Xinde Semiconductor Technology Co. have raised a combined $301 million in initial public offerings, Bloomberg reports.

Security Infrastructure

Researchers report active attacks exploiting Linux SSH vulnerability

Attackers are actively exploiting a vulnerability called sshole to gain unauthenticated access to privileged accounts on some Linux systems, researchers report.

Capital

Altimeter targets $2.5 billion fund for late-stage companies

Altimeter Capital Management is targeting a $2.5 billion venture capital fund for late-stage, pre-IPO companies, Bloomberg reported, citing securities filings and a person familiar with the matter.

Products Infrastructure

Rocket Lab reports $3.57 billion backlog as quarterly revenue rises 72.7%

Rocket Lab reported a $3.57 billion order backlog alongside third-quarter revenue of $267.8 million, up 72.7% from a year earlier.

Security

Vanderbilt tells users to shut down devices during cyberattack

Vanderbilt University confirmed an active cybersecurity incident Monday and told students, faculty and staff to shut down university devices and disconnect from university Wi-Fi.

Infrastructure

Banks and private lenders pull back from new AI data center financing

Commercial banks and private credit lenders have begun pulling back from financing new AI data centers, Business Day reported. Credit committees are stalling deals even for facilities backed by Alphabet and Anthropic as secondary debt markets reprice risk.