Fashion retailer Revolve warned investors that hackers stole payment card information during a recent cyber incident, according to a filing with the Securities and Exchange Commission (SEC).
Revolve filed an 8-K report on Thursday saying hackers gained access to multiple company systems. The company did not respond to questions about when the attack occurred.
In the report, Revolve said an initial investigation found that the threat actors used "automated means" to obtain names, contact information, payment card numbers and payment card expiration dates. The data came from customers who saved payment information in their online shopping accounts on Revolve's e-commerce platform.
Revolve said it has notified federal law enforcement agencies and hired a cybersecurity firm to lead the recovery effort. The company said the attack caused no operational disruptions and that it does not expect material financial impacts.
Revolve did not say how many people were affected. It told regulators in Texas on Friday that 127,200 people in the state had information stolen. Another 1,328 victims are in Vermont, and breach notifications were filed in Massachusetts.