Act this weekWhat happenedRevolve says hackers accessed its online shopping systems in September and may have stolen customer names, addresses and saved card details.
Who is affectedRevolve customers who saved their name, address and payment card information to their accounts on the company's online store.
What to do- 1Check your card statements for charges you do not recognize.
- 2Call your card issuer if anything looks wrong and ask about a replacement card.
- 3Delete saved cards from shopping accounts you do not need to store them in.
- 4Watch for fake emails or texts that use your details to ask for money or logins.
Online fashion retailer Revolve has told at least 200,000 people that their personal and payment card information was stolen in a September hack. Security Week reported the news on Monday, Nov. 2.
What happened
Hackers got into company systems, including the online shopping platform. Revolve says the stolen data may include names, addresses, card numbers and card expiration dates. That applies to customers who saved the information to their accounts.
Revolve says it contained the attack, contacted law enforcement and hired a cybersecurity company. It also says service was not interrupted and it does not expect a major impact on its business, according to a filing with the Securities and Exchange Commission.
Who can relax, and who should not
The risk centers on people who saved a card to a Revolve account. Shoppers who never stored their details there appear to be less exposed, though the report does not say this outright. Revolve is not offering free identity theft or credit monitoring. It told customers to review their statements and stay alert for fraud.
The steps in the alert box above cover what to do now.
What is not known yet
The report does not say how the hackers got in. It also does not say whether the stolen details have been used. The count of 200,000 is a minimum, so the real number could be higher.
The takeawayIf you saved a card on Revolve, watch your statements closely, because the company is not paying for monitoring.