VF Company, the corporate at the back of manufacturers like Vehicles, Timberland, The North Face, Dickies, and Very best, stated that greater than 35 million shoppers had their non-public knowledge stolen in a December ransomware assault.
The American international attire and shoes massive stated that the affected shoppers’ social safety numbers, checking account knowledge, or fee card knowledge used to be now not impacted because it does not retailer such knowledge on its programs.
“In accordance with VF’s initial research from its ongoing investigation, VF recently estimates that the danger actor stole non-public knowledge of roughly 35.5 million person customers,” VF Corp stated in an 8-Okay shape filed with the U.S. Securities and Trade Fee (SEC) on Thursday.
“VF has now not detected any proof thus far that any shopper passwords have been bought via the danger actor.”
The corporate disclosed the ransomware assault in a December 15 SEC submitting, announcing the attackers “disrupted the corporate’s trade operations via encrypting some IT programs and stole knowledge from the corporate, together with non-public knowledge.”
On account of the assault, VF Corp used to be pressured to close down a few of its programs to include the breach and skilled interrupted replenishment of retail retailer stock and not on time order success, which resulted in shoppers canceling orders and delays of a few wholesale shipments.
Since then, it has considerably restored the IT programs encrypted within the incident however continues to paintings thru minor operational affects.
“VF believes the danger actor used to be ejected from VF’s IT programs on December 15, 2023. As of the date of this Modification, VF-operated retail retail outlets, logo e-commerce websites and distribution facilities are running with minimum problems,” this week’s SEC submitting unearths.
The corporate has but to tell its shoppers of the incident by means of its respectable web site or social media accounts. It has additionally now not but disclosed the character of the information impacted within the breach or whether or not it has affected its workers, providers, resellers, and companions.
VF Corp is recently cooperating with each federal regulation enforcement and related regulatory government because it investigates the assault and the level of its affect.
VF Corp is a Colorado-based attire company with an annual earnings of $11.6 billion that employs 35,000 other folks. It additionally owns 13 globally identified manufacturers, together with Vehicles, Timberland, The North Face, Very best, Dickies, Eastpak, Kipling, Napapijri, AND1, JanSport, Icebreaker, Altra Working, and SmartWool.
