Revolve breach may have exposed customers' saved payment card numbers
Teaser from the source
Online fashion retailer Revolve Group disclosed in an Oct 29 2026 SEC filing that an unauthorized actor accessed some of its systems. Based on its investigation, Revolve believes the actor may have obtained, through automated means, the name, contact information, payment card number and card expiration date of certain customers who had saved payment information in their online shopping accounts. Revolve says the activity was remediated, it notified federal law enforcement and hired outside cybersecurity experts, and the incident did not disrupt operations or customer service. It has not said how many customers are affected or how the attacker got in.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on customers
Other advisories
- HighCVE-2026-104368WebToffee Export and Import Users and Customers: unzureichende Kodierung von Ausgaben
- HighCVE-2026-104368WebToffee Export and Import Users and Customers: unzureichende Kodierung von Ausgaben
- MediumCVE-2026-54862Codection Import and export users and customers: Cross-Site-Scripting (XSS)
- MediumCVE-2026-54862Codection Import and export users and customers: Cross-Site-Scripting (XSS)
- Not ratedosv:CVE-2026-111629IoTSharp through 3.6.1 Cross-Tenant Data Exposure via Customers and Devices APIs
- MediumCVE-2026-17001Carazo Import and export users and customers: Cross-Site-Scripting (XSS)
- Not ratedosv:CVE-2026-108720phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages
- HighCVE-2026-104757Javier Carazo Import and export users and customers: fehlerhafte Rechtevergabe
Other news entries
- Northflank security breach leads to abuse of customers' AI API keysNewsBleepingComputer
- Bulletproof Host Virtualine Loses Its Domain to FBI SeizureNewsSecurityWeek
- Northflank security incident: PaaS tells users to assume all environment variables were decryptedBreachpwn.watch
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- Japan Airlines suffers third-party data breach exposing passenger infoNewsBleepingComputer
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-netNewsSecurityWeek
- AU Small Finance Bank investigates data leak on its Salesforce platformBreachpwn.watch
- Sony ISP subsidiary data breach exposes 2.5 million customer recordsNewsBleepingComputer
Source: https://pwn.watch/i/revolve-saved-payment-card-data-breach-oct-2026