Subj : Forever 21 data breach sees thousands of victims affected
To   : All
From : TechnologyDaily
Date : Fri Sep 01 2023 14:15:03

Forever 21 data breach sees thousands of victims affected

Date:
Fri, 01 Sep 2023 13:02:44 +0000

Description:
Hackers stole data on current and former Forever 21 employees, including 
Social Security Numbers.

FULL STORY
======================================================================

Employees of Forever 21, both current and former, have had personal data 
stolen in a cyberattack that the company suffered earlier this year, the 
company has confirmed. 

Forever 21 confirmed unnamed threat actors were occasionally able to 
infiltrate the companys infrastructure and steal sensitive data from its 
endpoints between early January and late March 2023. 

During this time, the hackers stole peoples full names, Social Security 
Numbers, birth dates, bank account numbers, and their Health Plan 
information. No customers affected 

In a statement given to BleepingComputer , the companys spokesperson 
confirmed that the customers were not affected by the breach. Forever 21 
operates 540 outlets all over the world, employing more than 40,000 people. 
Read more 

> Citrix servers hacked using zero-day exploit 


 > Hackers are targeting US critical infrastructure using this Citrix 
zero-day 


 > These are the best privacy tools around 

The company filed a breach notice with the Office of the Maine Attorney 
General earlier this month, the publication stated, in which it said that it 
engaged with the attackers to ensure the stolen data doesnt get leaked 
online. This usually happens in cases of ransomware attacks. However, no 
ransomware attack against Forever 21 has been confirmed. It is also worth 
mentioning that lately, ransomware attackers started refraining from 
deploying the encryptor, as it is too expensive and cumbersome to develop, 
maintain, and deploy. Instead, some are opting just for data theft, which 
might have been the case here. 

If Forever 21 did pay any ransom, the amount is unknown. The stolen data 
doesnt seem to have been posted anywhere. 

In any case, caution is advised. The company will enroll affected individuals 
in fraud and identity theft protection services for a year, free of charge. 
Those who believe they might be affected by this incident should be careful 
when receiving emails and other forms of communication, especially if the 
sender appears to be Forever 21. Here is the best firewall to keep your 
business protected 

Via: BleepingComputer



======================================================================
Link to news story:
https://www.techradar.com/pro/security/forever-21-data-breach-sees-thousands-o
f-people-affected


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.