Revolve Group, Inc. filed a current report on October 29, 2026, disclosing that an unauthorized actor may have obtained customer names, contact information, and payment card details from its e-commerce platform.

Key Highlights

  • Unauthorized access confirmed: The company disclosed it "recently became aware of unauthorized access to certain of its systems" and confirmed the unauthorized activity was remediated.
  • Data potentially obtained: An unauthorized actor may have obtained, through automated means, customer names, contact information, payment card numbers, and payment card expiration dates.
  • Affected customers: The incident involved customers who had saved payment information associated with their online shopping account on the company's e-commerce platform.
  • No operational disruption: According to the filing, the incident "has not resulted in operational disruption or interrupted service to any customers."
  • No material impact expected: As of the date of the report, the company stated it "does not believe this incident will have a material impact on its business."
  • Law enforcement and experts engaged: The company notified federal law enforcement authorities and engaged external cybersecurity experts to assist with the investigation and response.

Revolve Group Reports Cybersecurity Incident Affecting Saved Payment Information

Revolve Group, Inc. (NYSE:RVLV), the Cerritos, California-based e-commerce company, filed an 8-K current report dated October 29, 2026, under Item 8.01 (Other Events), disclosing a cybersecurity incident involving unauthorized access to certain company systems. According to the filing, the company promptly initiated its cyber incident response protocols upon becoming aware of the intrusion and confirmed the unauthorized activity was remediated.

The filing states that, based on the company's investigation, "an unauthorized actor may have obtained, through automated means, the name, contact information, payment card number and payment card expiration date for certain customers who saved payment information associated with their online shopping account on the Company's e-commerce platform." The company also disclosed that it proceeded to assess and investigate the scope of the incident and to identify and implement enhanced security measures designed to prevent a similar event from occurring.

The company reported no operational disruption and no interruption of customer service as a result of the incident. The filing includes forward-looking statements regarding the company's current beliefs about the incident's impact, which the company cautioned are subject to risks and uncertainties, including those related to ongoing assessment of the incident, and legal, regulatory, reputational, and financial risks. The report was signed by Jesse Timmermans, Chief Financial Officer.

What Was Disclosed

Revolve Group disclosed a cybersecurity incident in which an unauthorized actor may have accessed customer names, contact information, and payment card details from its e-commerce platform. The company stated the activity was remediated and that it does not expect a material business impact as of the filing date.