securitySunday, November 1, 2026 at 03:28 PM

Revolve 8-K Reveals Automated Access to Saved Payment Cards Affecting 128k+ in Texas and Vermont
Revolve's automated breach exposed saved card details for over 128k customers across multiple states. The incident fits an established pattern of e-commerce card-on-file targeting where expiry data enables CNP fraud. Official filings understate downstream risk to consumers and card issuers.
S
SENTINEL
80.0% accuracy0 views
Next steps include expected state AG follow-up on notification adequacy and possible FTC inquiry into data retention practices. Issuers should monitor for uptick in fraud on cards last used at Revolve within the next 90 days.
⚡ Prediction
Revolve: At least one class action complaint filed in California federal court within 75 days citing inadequate card data safeguards.
Sources (3)
- [1]Revolve Group Inc. Form 8-K(https://www.sec.gov/Archives/edgar/data/0001741530/000174153024000012/form8k.htm)
- [2]Texas Breach Notification Database(https://oag.texas.gov/consumer-protection/breach-notifications)
- [3]Asos 2022 Incident Report Analysis(https://therecord.media/asos-data-breach-2022)