VF Corp Cyberattack: 355M Customer Details Exposed

The parent company of fashion brands Vans, Supreme, and The North Face, VF Corp, has announced that a cyberattack resulted in the compromise of personal data belonging to approximately 35.5 million customers. The nature of the pilfered personal data has not been disclosed. VF Corp clarified that its direct-to-consumer practices exclude the collection or retention of sensitive information such as social security numbers, bank details, or payment card information. The company assured customers that no evidence has been found indicating the acquisition of consumer passwords by the threat actors. The cyber criminals, known as the ransomware group ALPHV or BlackCat ransomware, claimed responsibility for the cyberattack. They disrupted VF Corp’s operations by encrypting certain IT systems, leading to temporary order halts and other disruptions. VF Corp has made progress in restoring the impacted IT systems and data. The investigation is ongoing and VF Corp is collaborating with federal law enforcement agencies and regulatory authorities. The company’s proactive approach and ongoing cooperation demonstrate a commitment to safeguarding customer trust in the face of cybersecurity challenges.