Notice of Payment Card Security Incident

FOREVER 21 is notifying our customers that we recently received a report from a third party that suggested

there may have been unauthorized access to data from payment cards that were used at certain FOREVER 21

stores. We immediately began an investigation of our payment card systems and engaged a leading security

and forensics firm to assist us.

Because of the encryption and tokenization solutions that FOREVER 21 implemented in 2015, it appears that

only certain point of sale devices in some FOREVER 21 stores were affected when the encryption on those

devices was not in operation. Our investigation is focused on card transactions in FOREVER 21 stores from

March 2017 - October 2017. Because our investigation is continuing, complete findings are not available, and

it is too early to provide further details on the investigation. We expect to provide an additional notice as we

get further clarity on the specific stores and timeframes that may have been involved.

It is always advisable for customers to closely monitor their payment card statements. If customers see an

unauthorized charge, they should immediately notify the bank that issued the card. Payment card

network rules generally state that cardholders are not responsible for such charges.

We regret that this incident occurred and apologize for any inconvenience. We will continue to work to address

this matter.

For more information, please contact Customer Service at 1 (888) 494 - 3837

Media Contact: