Online fashion retailer Revolve disclosed that a breach on September 11 exposed personal and payment card data of at least 180,000 individuals. Hackers accessed the company’s online shopping platform and may have exfiltrated names, addresses, payment card numbers and expiration dates stored on customer accounts. Revolve said the incident did not disrupt operations or services and it does not expect a material impact on its business. The retailer has notified law enforcement, retained a cybersecurity firm for remediation, and sent notification letters to at least 179,259 people based on filings with Attorney General offices in Iowa, Massachusetts, Texas and Vermont. Revolve is not offering free identity-theft or credit-monitoring services but advises affected individuals to review account statements and stay vigilant for fraud or identity theft. 1