Teollimi

Revolve (Revolve.com, FWRD) data breach

Was I affected?

Revolve (Revolve.com, FWRD) confirmed a breach affecting about 1.5 million people, exposing names, addresses and payment card numbers. You may be affected if you had a payment card saved in your Revolve or FWRD account and received a Revolve 'Notice of Data Breach' letter from late October 2026.

Revolve (Revolve.com, FWRD) breach facts
AnnouncedOct 29, 2026
When it happenedSeptember 11, 2026
CountryUnited States
People affected1.5 million
Data exposedNames, Addresses and Payment card numbers
StatusConfirmed by the company or a regulator filing

What happened

Online fashion retailer Revolve, which runs Revolve.com and FWRD.com, said an unauthorized actor got into its shopping platform on September 11, 2026 and may have taken information on customers who had a payment card saved in their account. The data includes names, addresses, card numbers and expiration dates; Revolve's notices do not mention security codes (CVV). Texas filing data reported by Malwarebytes lists 1,515,073 people in total, while earlier state filings counted at least 200,000. Revolve is not offering credit monitoring.

What should I do?

  1. Check your card statements line by line for charges you don't recognize, including small test charges, and report them to your card issuer right away using the number on the back of your card.
  2. Ask your card issuer to cancel the card named in the letter and send a replacement with a new number; the expiration date was exposed along with the number.
  3. Remove saved cards from your Revolve account and other shopping accounts you rarely use.
  4. Ignore emails or texts about the breach that ask you to 'verify' your card or claim a refund; contact Revolve only through revolve.com or the number in your letter (888-517-6458).
XRedditWhatsApp

More data breaches in the United States →

Check the other services you use →

Sources