VF Company, the corporate behind manufacturers like Vans, Timberland, The North Face, Dickies, and Supreme, mentioned that greater than 35 million clients had their private info stolen in a December ransomware assault.
The American world attire and footwear large mentioned that the affected clients’ social security numbers, checking account info, or fee card info was not impacted because it does not retailer such information on its methods.
“Primarily based on VF’s preliminary evaluation from its ongoing investigation, VF at the moment estimates that the risk actor stole private information of roughly 35.5 million particular person shoppers,” VF Corp mentioned in an 8-Okay kind filed with the U.S. Securities and Trade Fee (SEC) on Thursday.
“VF has not detected any proof to this point that any shopper passwords have been acquired by the risk actor.”
The corporate disclosed the ransomware assault in a December 15 SEC submitting, saying the attackers “disrupted the corporate’s enterprise operations by encrypting some IT methods and stole information from the corporate, together with private information.”
On account of the assault, VF Corp was compelled to close down a few of its methods to comprise the breach and skilled interrupted replenishment of retail retailer stock and delayed order achievement, which led to clients canceling orders and delays of some wholesale shipments.
Since then, it has considerably restored the IT methods encrypted within the incident however continues to work by means of minor operational impacts.
“VF believes the risk actor was ejected from VF’s IT methods on December 15, 2023. As of the date of this Modification, VF-operated retail shops, model e-commerce websites and distribution facilities are working with minimal points,” this week’s SEC submitting reveals.
The corporate has but to tell its clients of the incident by way of its official web site or social media accounts. It has additionally not but disclosed the character of the information impacted within the breach or whether or not it has affected its staff, suppliers, resellers, and companions.
VF Corp is at the moment cooperating with each federal legislation enforcement and related regulatory authorities because it investigates the assault and the extent of its influence.
VF Corp is a Colorado-based attire agency with an annual income of $11.6 billion that employs 35,000 individuals. It additionally owns 13 globally acknowledged manufacturers, together with Vans, Timberland, The North Face, Supreme, Dickies, Eastpak, Kipling, Napapijri, AND1, JanSport, Icebreaker, Altra Working, and SmartWool.