# SZB-97dd5a7209: Revolve says September cyberattack affected more than 1.5 million people

Revolve told regulators that its September cyberattack affected more than 1.5 million individuals, according to SecurityWeek.

- Type: Breach
- Status: Confirmed
- Vendor: Revolve
- Disclosed: 2026-11-09 14:08 UTC
- Data taken: 1.5M records
- Sources: 5 distinct
- First seen by cve.now: 2026-11-09 14:16 UTC · Updated: 2026-11-09 22:25 UTC

Written by a model from the sources below. Verify against them.

## Summary

The item does not describe the data involved or how the attackers gained access.

## What to do

- Watch for breach notification letters from Revolve and follow the steps they describe
- Monitor bank and card statements for unfamiliar charges
- Be wary of unsolicited emails or calls that reference Revolve or an order
- Consider placing a credit freeze with the major credit bureaus

## Timeline

- 2026-11-09 14:08 UTC: Made public by SecurityWeek
- 2026-11-09 14:08 UTC: Confirmed by Revolve. SecurityWeek: “The company revealed the incident on October 29 in a filing with the US Securities and Exchange Commission (SEC).” ([source](https://www.securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million/))
- 2026-11-09 14:16 UTC: First seen by cve.now

## What was taken

1.5M records, per [SecurityWeek](https://www.securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million/).

## Evidence (5 sources)

- 2026-11-09 · Press · [SecurityWeek](https://www.securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million/): “Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/cybernewsph.com/post/3mzv5vm3es22x): “Revolve told regulators that a cyberattack in September affected more than 1.5 million individuals, SecurityWeek reports.”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/hapsis.bsky.social/post/3mzv6lqofis25): “Revolve Puts Data Breach Victim Count at 1.5 Million”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/hendryadrian.bsky.social/post/3mzvdm4mtcv2h): “Revolve told Indiana that 1,515,073 people were affected by a breach.”
- 2026-11-09 · Social · [Bluesky](https://bsky.app/profile/undercodenews.bsky.social/post/3mzvxf7zujy2g): “Fashion retailer Revolve has disclosed a data breach affecting 1,515,073 individuals, according to…”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-97dd5a7209&body=https%3A%2F%2Fcve.now%2FSZB-97dd5a7209%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the Revolve breach

### Was Revolve breached?

Yes. Revolve says so: “The company revealed the incident on October 29 in a filing with the US Securities and Exchange Commission (SEC).” (SecurityWeek).

Source: https://www.securityweek.com/revolve-puts-data-breach-victim-count-at-1-5-million/

### What data was exposed?

1.5M records.

### What should Revolve customers do?

Watch for breach notification letters from Revolve and follow the steps they describe. Monitor bank and card statements for unfamiliar charges. Be wary of unsolicited emails or calls that reference Revolve or an order. Consider placing a credit freeze with the major credit bureaus.

## Related

- Started as early warning SZB-97dd5a7209, first seen 2026-11-09 14:16 UTC
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-97dd5a7209
Site guide for agents: https://cve.now/llms.txt