This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1159 To_xml

SUMMARY

98,930 credit and debit card numbers stolen from database
Records 98,930
Record Types CCN
Breach Type Hack
Data Family Electronic
Source Outside
Organization Forever 21
Other Affected/Involved Organizations None
Lawsuit? NO/UNKNOWN
Data Recovered? NO/UNKNOWN
Arrest? YES
Submitted By: Lyger

TIMELINE

DateEvent
None. Add Data Incident Occurred
2008-08-05 Incident Discovered By Organization
2008-09-12 Organization Reports Incident
None. Add Data Organization Mails Notifications
None. Add Data Records Recovered
None. Add Data Lawsuit Filed
2008-08-05 Arrest Made

SIMILAR INCIDENTS

recordsdateorganizations
98,000 2001-03-05 Amazon, Bibliofind.com
140,000 2005-11-26 Troy Group, Scottrade
79,000 2007-01-12 MoneyGram
60,000 2007-08-10 Tele2

MAP OF INCIDENT LOCATION

Address: 2001 S Alameda St, Los Angeles, CA 90058, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COSTS SUMMARY

Known Actual Costs

No known costs for this incident.

Estimated Costs

Ponemon Institute Direct Costs Estimate 1 $5,935,800.00
  1. Note that these estimates are based on the Ponemon Institute's 2009 direct costs figures from their 2009 Annual Study: Cost of a Data Breach. We multiply $60.00 by the number of records to obtain this figure. Keep in mind that depending on the breach, the direct costs are not always suffered by the breached organizations. In the case of credit card number breaches, the direct costs can often be suffered by banks and card issuers. Also note that this is only an estimate.

PRIMARY SOURCES

Primary Source ID: 140

add details to this primary source Description
98,930 credit and debit card numbers stolen from Forever 21 database
FilenameSourceResearcher Incident IDs
MD_ITU159156.pdfMaryland Attorney Generalkirniki <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2008-12-04 23 Sep 12:43
Excerpt
140

; . : I § f [ D g S 2001’S©tJTI§IALAI\/l`EDAi&REEf‘!iLOSANGEIQPS,%iCALIPORI\llA;9GO58·iABHONE§(2el‘S)I4`l€5lOO i FA><‘(2le3)»74l—8995 is September 16, 2008 _ VIA US MAIL Office of the Att...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1124

add details to this primary source Description
98,930 credit and debit card numbers stolen from database
FilenameSourceResearcher Incident IDs
ME_09192008_forever_21.pdfMaine Attorney Generalkirniki <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2009-01-19 24 Jan 01:10
Excerpt
1124

1 `'. .'' ‘ '.L A °-- l ‘—·‘?i1TZl?.lt’ 4 { Q Q { Q A is ities - y A ` l ` `TVIE-Nl? out · . 2001 Sou11·1 ALAIVIEDA STREET - tos ANGELES; CALIFORNIA 00050 · PHONE (21 sy - September 16, 2...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 216

add details to this primary source Description
98,930 credit and debit card numbers stolen from database
FilenameSourceResearcher Incident IDs
NH_forever21.pdfNew Hampshire Consumer Protection & Antitrust Bureaukirniki <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2008-12-04 23 Sep 13:29
Excerpt
216

* £=~·~·’ V..~ 3% 20S? Scene ;¤=mm&c»ASm&Er ¤ Laws C¤>m0¤¢¢»r¤Q=3058 ¤ PHQNE {213) 74H€»EGG ·= FMQ213) ?4H—8€><?5 Ssptcmbaw 16, EQQS VIA US A-{A IL Arwmcy G¥3»l`&'cZTBi?S O1‘1°i¤:c 33 €.LTs=.pi2...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 919

add details to this primary source Description
Credit card and debit card details accessed by illegal access to customer information
FilenameSourceResearcher Incident IDs
20080916-Forever_21.pdfMaine Attorney Generald2d <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2009-01-12 29 Jan 13:23
Excerpt
919

it iiieyim, _., P, _ ";fi ;r~;mj_ ___ I mm \ , W W . 2. __, t' g fry- ~—3.’t_ifi,* t O ..,1/ C 1< .. ts. " ‘” M ik a ‘ *·*&..,$ _§ '?‘ . 2001 Soutn xitmrvttoa Steen - Los...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1311

add details to this primary source Description
Credit card and debit card details accessed by unauthorized person
FilenameSourceResearcher Incident IDs
VA_09162008_forever_21.pdfVirginia Attorney Generaljkouns <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2009-02-03 04 Feb 17:37
Excerpt
1311

if /"\ T' I 1 jj r ‘•‘N l lc) Q, [ l< 2001 Souta Auvrrsoa srarst · Los Arvoetes. Cauroanw?0058 · Paorre (213) 741-5100 - Fax (213) 7:11-8QQS September 16, 2008 VIA US MAIL Office ofthe Attorney G...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1429

add details to this primary source Description
Hawaii breach notification - Forever 21 - Hackers obtain access to a database containing customers credit card details. uknown how many resident in Hawaii, total affected 98,930 affected,
FilenameSourceResearcher Incident IDs
09-16-2008_Forever_21.pdfHawaii Office of Consumer Protectiond2d <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
0 2008-09-16 2009-03-17 14 Jun 17:20
Excerpt
1429

I · : -IT`\_ . l I A) ‘ ’ R1 ·‘ ‘ 1 1 `= i 1 ?3¥?'f"TT‘¥‘ i‘i“"= K ._ III! N r V e- .* ,_ . ` J {Y Q E Q '08 SEP ifi P it T.-t0 2001 SOUIH/\LAMEDASTREEi'LOSANGELES, CALIFORNINXDSB ·Pn-•...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 1797

add details to this primary source Description
North Carolina Data Breach Notification : Unknown number of NC residents payment card information was stolen by hackers.
FilenameSourceResearcher Incident IDs
20080916_Forever_21.pdfNorth Carolina Department of Justice, Consumer Protection Divisiond2d <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2009-06-13 14 Jun 18:16
Excerpt
1797

2001 Soum ALAMEDASTREEI · Los ANGELES, CALIFORNIAQOOSB - PHONE (213) 741 -5100 · FA><(213) 741-8995 September 16, 2008 VIA US MAIL I Attomey General’s Office Consumer Protection Division H 9001 Mail...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 2088

add details to this primary source Description
Massachusetts notification - 98,930 credit and debit card numbers stolen from database
FilenameSourceResearcher Incident IDs
20080916_forever21_MA.pdfMassachusetts Attorney Generald2d <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
Not yet entered 2008-09-16 2009-08-08 13 Aug 22:25
Excerpt
2088

f Q E li 2001 SOUTHALAMEDASIREET ··tos ANGELES, CPUFORNI/\9G]58 · PHONE (213) 7416100 - FA>< (213) 741-8995 September 16, 2008 ` VIA US MAIL Office of Attomey General Martha Ooakley One Ashburt...

Click here for the Full Details | Download Raw PDF

Primary Source ID: 2176

add details to this primary source Description
Massachusetts Data Breach Notification : Hack revealed credit card informtion of earlier customer activities.
FilenameSourceResearcher Incident IDs
20080916_forever_21.pdfMassachusetts Attorney Generald2d <a href='/incidents/show/1159'>1159</a>
RecordsFile DateUploadedUpdated
883 2008-09-16 2009-08-08 26 Aug 17:16
Excerpt
2176

__E£z;i’;‘°£` , f O { I2 rwfmv our 2001 SOUlHALAMEDASIREET' LOS/\NGElES,`CAIJFORNlA9@58 -=PHoNe(213) 741-6100 · FAx (213) 741-8995 September 16,2008 I VIA US MAIL Office of Attorney General M...

Click here for the Full Details | Download Raw PDF

COMMENTS

by jericho [Senior Investigator] on 2009-05-14 (over 2 years ago)

"Forever 21 issued a statement saying that the chain had been wirelessly breached repeatedly between Mar. 25, 2004, and Aug. 14, 2007"

New Comment

captcha
Are you human?

Sponsored By: Credant_200x51 Rbs Tenable Zecurion
Use of the DataLossDB, and its exports, RSS feeds, reports, or other materials produced on this site by the Open Security Foundation requires authorization and potential licensing arrangements. For more information, please e-mail officers@opensecurityfoundation.org with a brief summary of how you would like to use this information; product, service, research, etc.
© 2005 - 2012, Open Security Foundation, All Rights Reserved.