Resolve confirms data breach exposing customer card numbers

Resolve, a fashion retailer that markets itself as a next‑generation brand for Millennials and Generation Z shoppers, announced on Thursday that a recent cyber intrusion compromised the payment card information of its customers.

The breach, which the company discovered during an internal security review, involved the theft of credit and debit card numbers stored in its e‑commerce platform. Resolve has not released specific figures on how many accounts were affected, but it confirmed that the compromised data included card numbers, expiration dates and, in some cases, security codes.

In a statement, Resolve said it immediately engaged a third‑party cybersecurity firm to investigate the incident and is working with payment processors and financial institutions to contain the fallout. The retailer also notified affected individuals and is offering free credit‑monitoring services for a year to help mitigate potential fraud.

The incident joins a growing list of retail data breaches that have plagued the industry over the past few years, as cybercriminals increasingly target the large volumes of payment data held by online merchants. Such attacks often exploit vulnerabilities in third‑party integrations or outdated security protocols, underscoring the challenges retailers face in safeguarding digital transactions.

Consumers whose card details were exposed are advised to monitor their bank statements for unauthorized activity, consider placing fraud alerts on their credit files, and follow any instructions from their card issuers. While the theft of card numbers does not automatically result in fraudulent charges, it raises the risk of unauthorized purchases if the data is later used in combination with other personal information.

Regulators are likely to scrutinize Resolve’s response, and the company could face penalties if it is found to have failed to meet industry security standards such as PCI‑DSS. Resolve indicated that it will accelerate its investment in advanced encryption and tokenization technologies and is reviewing its data‑retention policies to prevent similar incidents in the future.