Online fashion giant **Revolve** has disclosed a cybersecurity incident that led to the compromise of customer payment card information. In an 8-K report filed with the **Securities and Exchange Commission (SEC)**, the company confirmed that cybercriminals accessed multiple internal systems. The initial investigation revealed that threat actors employed "automated means" to obtain names, contact information, payment card numbers, and payment card expiration dates. This sensitive data belonged to customers who had saved their payment information within their online shopping accounts on **Revolve**'s e-commerce platform. While **Revolve** did not specify the exact timeline of the attack, it affirmed that federal law enforcement agencies have been notified. A cybersecurity firm has also been engaged to spearhead recovery efforts. The company stated that the incident did not cause operational disruptions and is not expected to have a material financial impact. ### Impacted Customer Numbers Emerge Although **Revolve** has not released a total number of affected individuals, regulatory filings provide a clearer picture of the breach's scope. In Texas, 127,200 individuals had their information stolen. An additional 1,328 victims were identified in Vermont, and breach notifications were also filed in Massachusetts. **Revolve**, founded in 2003, positions itself as a leading fashion retailer for Millennial and Generation Z consumers, offering products from over 1,600 brands. The company reported $347.4 million in net sales in its last fiscal quarter. ### Retailers Remain Prime Targets The incident underscores the persistent attractiveness of payment card information for cybercriminals targeting fashion retailers. In recent years, numerous major brands have fallen victim to similar attacks, including **Asos**, **Levi Strauss**, **Foschini Group**, **Mango**, **North Face**, **Harrods**, **M&S**, and **The Co-op**.