Fashion retailer Forever 21 confirmed a breach made public in November resulted in the theft of credit card data belonging to an undisclosed number of customers. The company had stated that a lack of encryption used on some of its point-of-sales payment terminals could have resulted in unauthorized access to payment card data. In its most recent update, issued last week, Forever 21 now states effected PoS terminals allowed hackers to install malicious software for nearly eight months in 2017. It said hackers targeted those few stores and the vulnerable PoS devices that kept logs of completed payment transaction authorizations.
Source: https://threatpost.com/forever-21-says-pos-systems-exposed-customer-data-for-8-months/129271/