Online fashion retailer Revolve disclosed in an 8-K filing with the SEC that cybercriminals gained access to multiple company systems and used "automated means" to obtain names, contact information, payment card numbers and card expiration dates from customers who had saved payment information in an account on its e-commerce platform. The company did not say when the attack occurred, but told Texas regulators that 127,200 people in the state had data stolen; it filed notifications in Massachusetts and Vermont (a further 1,328 victims), and has notified federal law enforcement and engaged a cybersecurity firm for recovery. Revolve said there were no operational disruptions and it does not expect a material financial impact. The payment-card data held by fashion retailers remains a prized target — Asos, Levi Strauss, Mango, The North Face, Harrods, M&S and The Co-op have all faced cyberattacks in the past two years.

• Source article