F21 OpCo LLC
ent_097491e57cc287f9e61d999a
Disclosures
8
State AG · 8 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
539,207
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- F21 OpCo LLC
- Normalized
- f21 opco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (8)newest first
- New Hampshire State AGas victim2023-09-05
F21 OpCo LLC (dba Forever 21) notified the NH AG of a ransomware incident. Unauthorized access occurred Jan 5–Mar 21, 2023; discovered Mar 20, 2023. 842 NH residents affected. Data included employee PII. Notifications sent Aug 29, 2023, offering credit monitoring.
- Indiana State AGas victim2023-08-29
F21 Opco LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-01-05 and was reported on 2023-08-29. 6,407 Indiana residents were affected. 539,207 individuals affected in total.
- Delaware State AGas victim2023-08-29
F21 OPCO, LLC d/b/a Forever 21 disclosed a cybersecurity incident occurring between January 5, 2023, and March 21, 2023. An unauthorized third party accessed systems and exfiltrated files containing names, SSNs, dates of birth, bank account numbers, and health plan information. The company engaged cybersecurity firms and law enforcement, contained the breach, and offered 12 months of credit monitoring. No evidence of fraud was found.
- Massachusetts State AGas victim2023-08-29
F21 OpCo LLC (d/b/a Forever 21) reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-29. 13,064 Massachusetts residents were affected. The report records the breach type as electronic.
- Oregon State AGas victim2023-08-29
F21 OpCo LLC (d/b/a Forever 21) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-08-29. The breach occurred during 1/5/2023 - 3/21/2023. The breach was discovered on 8/4/2023. 539,207 individuals were affected. Notice was sent on 8/29/2023.
- Maine State AGas victim2023-08-29
F21 OpCo LLC, operating as Forever 21, experienced an external system breach between January 5, 2023, and March 21, 2023. The breach was discovered on August 4, 2023, and affected 539,207 individuals. The compromised information included names and Social Security numbers. In response, the company provided written notifications to affected individuals between August 29 and August 31, 2023, and offered 12 months of identity protection services through Experian.
- Washington State AGas victim2023-08-29
F21 OpCo LLC (d/b/a Forever 21) reported a ransomware attack affecting Washington residents. Unauthorized access occurred Jan 5–Mar 21, 2023. Data included employee PII (SSN, DOB, bank info) and health plan data. 9,855 WA residents notified. Credit monitoring offered.
- California State AGas victim2023-08-29
Forever 21 (F21 OpCo LLC) disclosed a cyber incident where an unauthorized third party accessed systems between Jan 5 and Mar 21, 2023. The breach was discovered on Mar 20, 2023. Affected data includes names, SSNs, DOBs, bank account numbers, and health plan information. The company engaged forensic firms, notified law enforcement, and contained the access. No evidence of misuse was found. Complimentary identity monitoring was offered.