UPDATE: Forever 21's follow-up investigation of a data breach discovered in November has confirmed that malware was installed on some point-of-sale devices, and that some amount of personal payment card data was compromised. According to a statement from the retailer "the malware searched only for track data read from a payment card as it was being routed through the POS device. In most instances, the malware only found track data that did not have cardholder name — only card number, expiration date, and internal verification code – but occasionally the cardholder name was found." The retailer did not specify the number of stores or POS devices that were affected during the seven-month period in which the breach was ongoing.

read report

November 2017: Forever 21, which operates 815 stores in 57 countries has said that there had been unauthorised access to data from payment cards at certain of its stores. The company has not named the stores. Investigations are being acrried out on transactions made between March and October this year. Only certain points of sale devices in certain stores were affected when the encryption on those devices was not operating.

IADS is launching an Innovation Lab on Cybersecurity and Risk Management in March

Innovation Lab on Cybersecurity