The company became aware of the breach when they were notified of "unauthorized access to data from payment cards that were used at certain Forever 21 store locations."
The investigation into the incident is ongoing, and we don't have full details yet, but here's what we know so far:
• Although the company had attempted to bolster security by implementing a token and encryption-based system that was designed to protect transaction data on the company's point-of-sale system, an implementation issue at some store locations left POS equipment vulnerable, and these were the devices the hackers gained access to.
• Anyone who shopped at a Forever 21 location between March and October 2017 may have been impacted.
At this point, three significant pieces of information are missing. We do not yet know exactly which stores were impacted, nor how many of Forever 21's customers may have seen their credit card information exposed, or what level of access the hackers may have had to the transaction data. We also don't yet know if the group responsible got any personally identifiable information from the affected terminals.
The company's official announcement regarding the breach included the following statement:
"Forever 21 immediately began an investigation of its payment card systems and engaged a leading security and forensics firm to assist. We regret that this incident occurred and apologize for any inconvenience. We will continue to work to address this matter."
If you've shopped at any Forever 21 location during the timeframe mentioned above, be aware that your payment data may have been compromised. For now, the best thing you can do is monitor your credit card statements closely for any unusual activity and report it immediately if you find it.