In a statement, clothing retailer Forever 21 said it was informed by a third-party vendor that unauthorized access to data from its payment card system took place between March and October 2017, SC Magazine reports. The company said that while a system of encryption and tokenization had been implemented in point-of-sale payment systems in 2015, the data breach affected stores where the security system was not operational. Mike Kail, CTO of Cybric, said he was "Surprised and disappointed to hear this as it sounds like they weren't (fully) PCI compliant. That is the first issue that they should disclose and whomever performed the audit should be held accountable. This continued poor hygiene needs to end."
Full Story