On January 18, 2024, VF Corporation filed a notice of data breach with the Securities and Exchange Commission after discovering that an unauthorized party had gained access to its IT system. In this notice, VF Corp. explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information. Upon completing its investigation, VF Corp. began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from VF Corporation, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the VF Corp. data breach. For more information, please see our recent piece on the topic here.
What Caused the VF Corp. Data Breach?
The VF Corp. data breach was only recently announced, and more information is expected soon. However, VF Corp.’s filing with the Securities and Exchange Commission provides some important information on what led up to the breach. According to this source, on December 13, 2023, VF Corp. identified suspicious activity within a portion of the company’s IT network. In response, VF Corp. contained the incident and then launched an investigation with the help of third-party forensic specialists.
The VF Corp. investigation is still ongoing. However, in a January 18, 2024, SEC filing, the company explained that “VF currently estimates that the threat actor stole personal data of approximately 35.5 million individual consumers.” VF Corp. notes that it does not collect Social Security numbers, bank account numbers, or payment card information. Since the attack, VF Corp has been able to resume normal operations for the most part, with minimal impact on the company’s retail operations.
Ultimately, if VF Corp. confirms that sensitive consumer data was accessible to an unauthorized party as a result of the cyberattack, the company will be required to send data breach letters to anyone who was affected. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About VF Corporation
Founded in 1899, VF Corporation is an apparel and footwear company based in Denver, Colorado. VF Corp. owns several successful and well-known brands, including The North Face, Vans, Dickies, Timberland, JanSport, Eastpak, and And1. As of 2015, VF Corp. controlled 55% of the backpack market in the United States. VF Corp. employs more than 33,000 people and generates approximately $11.4 billion in annual revenue.
