REVOLVE GROUP, INC.
ent_019fa1eaa93832c6d76004ad25f90ef3
Disclosures
4
State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,515,073
nationwide · State AG TX
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- REVOLVE GROUP, INC.
- Normalized
- revolve group— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5299000AXC2CP62K3O12
- SEC EDGAR CIK
- 0001746618
- Domain
- None on record
Disclosure history (4)newest first
- Texas State AGas victim2026-10-30
Revolve Group, Inc. based in Cerritos, California, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-09-29 and reported on 2026-10-30. 127,200 Texas residents were affected. 1,515,073 individuals affected in total. Types of information involved: Name of individual;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via Posted at company website or special website;U.S. Mail.
- Vermont State AGas victim2026-10-29
Revolve Group, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-29. The reporting organization type is Other Commercial. 1,328 Vermont residents were affected. Categories of data breached: Financial Account Codes, Credit and Debit Account Info.
- Iowa State AGas victim2026-10-29
Revolve Group, Inc. notified the Iowa Attorney General of a security incident affecting 3,918 Iowa residents. On September 11, 2026, an unauthorized actor accessed the online shopping platform and acquired customer names, addresses, and payment card numbers/expiration dates. Revolve contained the incident, notified law enforcement, and began mailing notifications on October 29, 2026.
- Delaware State AGas victim2026-10-29
Revolve Group, Inc. notified customers of a data security incident involving its online shopping platform. On September 11, 2026, an unauthorized actor accessed the platform. The company determined that customer name, address, payment card number, and expiration date were involved. The company contained the activity, notified law enforcement, and is enhancing system security.