Forever 21 clothing and accessories retailer is sending data breach notifications to more than half a million individuals who had their personal information exposed to network intruders.
The investigation revealed that hackers had intermittent access to Forever 21 systems between January and March this year and leveraged this access to steal data.
“The investigation revealed that an unauthorized third party accessed certain Forever 21 systems at various times between January 5, 2023, and March 21, 2023,” reads the notice.
“Findings from the investigation indicate the unauthorized third party obtained select files from certain Forever 21 systems during this time period” – Forever 21.
In the notice, Forever 21 reports that they have taken measures to ensure the hackers have erased the stolen data, an indication that the company communicated with the attacker.
In November 2017, Forever 21 notified its customers of another data breach impacting its payments system, resulting in the compromise of card data from transactions made between March and October 2017.
