Popular Retailer Forever 21 Said To Be Investigating A Payment Card Breach

Screen Shot 2017-11-16 at 11.29.25 AM.png

Fashion retailer Forever 21 informed customers on Tuesday that it has launched an investigation into a security incident involving payment systems.

The company said it recently learned from a third-party that credit and debit cards used at certain Forever 21 stores may have been compromised.

An investigation has been launched and a cybersecurity and forensics firm has been called in to assist. Forever 21 has provided few details about the incident, but noted that its investigation focuses on transactions made between March and October 2017.

The company has promised to share more information, including the list of affected stores and timeframes, in the upcoming period. But does say when this will be. It did, however, highlight that security mechanisms implemented in many of its stores made stealing payment card information difficult.

“Because of the encryption and tokenization solutions that Forever 21 implemented in 2015, it appears that only certain point of sale devices in some Forever 21 stores were affected when the encryption on those devices was not in operation,” the company said in a statement.

In the meantime, the company has advised customers to keep a close eye on credit card statements and immediately notify their bank of any unauthorized charges.

Forever 21 operates over 800 stores in 57 countries around the world. The company is the 5th largest specialty retailer in the United States and with their millions of customers, such a large retailers, like Forever 21, have typically been the hardest hit. Companies must pay up to $172 per stolen record in clean-up costs.”

Source: Security Week, Edward Kovac

Allyson White, CEO Alde Security Solutions, LLC.