Revolve Group discloses cyber incident exposing saved customer payment card data
Revolve Group disclosed in an 8-K that unauthorized access to certain of its systems may have exposed names, contact details, payment card numbers and expiration dates for customers who saved payment information on its e-commerce platform. The company says the activity was remediated, there was no operational disruption, and it does not believe the incident will have a material impact on its business.
Key points
- Unauthorized actor may have obtained, through automated means, customer names, contact information, payment card numbers and card expiration dates for customers who saved payment information.
- Incident caused no operational disruption or interruption of service to customers, per the filing.
- Company notified federal law enforcement and engaged external cybersecurity experts; it believes the incident will not have a material impact on its business.
- Filing is dated October 29, 2026 and was signed by CFO Jesse Timmermans.
The filing
Written by AI on Nov 9, 2026, 11:43 AM ET, from this filing only. Written later: this filing was briefed after the fact, when past filings were added to the site, so the brief may be read with hindsight; the filing itself is the record of what was known on October 29, 2026.
Briefs are written by AI from the filing text and can contain mistakes — open the filing before acting on anything. Impact (1-5) and tone are the AI's reading of the filing for shareholders, not a price forecast. Not investment advice.