"500k Impacted by Data Breach at Fashion Retailer Forever 21"

Fashion retailer Forever 21 has recently started informing more than 500,000 individuals that their personal information was compromised in a data breach earlier this year.  The fashion retailer revealed that, on March 20, 2023, it identified a cyberattack that impacted some of its systems.  Forever 21’s investigation determined that the attackers had access to the company’s systems since at least January 5, 2023, and that they accessed those systems several times until March 21.  The company noted that this month, it discovered that the files the attackers accessed contained personal information, including names, birth dates, Social Security numbers, bank account numbers, and Forever21 health plans data.  Forever 21 told the Maine Attorney General that close to 540,000 individuals were impacted by the incident.  The company noted that it has no evidence suggesting that the stolen information “has been misused for fraud or identity theft.” While the retailer shared no details on how the attackers breached its systems and whether file-encrypting ransomware was used, the notification letter suggests that it engaged in communication with the attackers and that a ransom might have been paid.

SecurityWeek reports: "500k Impacted by Data Breach at Fashion Retailer Forever 21"