Over a seven-month period in 2018, Forever 21 suffered a malware attack targeting their POS systems which led to the theft of payment card data of an undetermined number of customers. The fashion retailer acknowledged the lack of encryption on some POS devices, which facilitated the attack. The exact number of affected customers remains undisclosed, and the financial repercussions were not publicly shared. Nevertheless, Forever 21 settled a class-action lawsuit by agreeing to pay claims for expenses and charges arising from the incident, although the total cost of this settlement was not revealed.
Source: https://arcticwolf.com/resources/blog/10-major-retail-industry-cyber-attacks/
"id": "for305050624",
"linkid": "forever-21",
"type": "Breach",
"date": "07/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"