In December 2023, VF Corporation, a company owning and operating various apparel and footwear brands, experienced a data breach due to a cyber incident. The breach affected a significant number of consumers, and the company has since worked to restore the impacted IT systems and data. Despite the breach, VF Corporation does not anticipate a material impact on its financials.

How many accounts were compromised?

The breach impacted data related to approximately 35.5 million individuals.

What data was leaked?

The data exposed in the breach included personally identifiable information of customers, but did not involve Social Security numbers, bank account information, or payment card details.

How was VF Corporation hacked?

Attackers targeted VF Corporation with a ransomware attack, leading to the exposure of personal data for 35.5 million customers. The specifics of the breach, such as the methods used by hackers or the presence of malware, remain unclear. The company has since restored impacted IT systems and data, while addressing minor operational issues.

VF Corporation's solution

In response to the hacking incident, VF Corporation took several measures to secure its platform and prevent future incidents. This included ejecting the threat actor from its IT systems, restoring impacted systems, and cooperating with law enforcement and regulatory authorities to investigate the ransomware attack. While the company continues to experience minor operational impacts, the specifics of enhanced security measures and customer notifications remain unclear.

How do I know if I was affected?

VF Corporation has not explicitly mentioned reaching out to affected users. However, if you believe you may have been affected by the breach, you can visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

• Change Your Passwords: Immediately update your passwords for any accounts that may have been affected. Make sure the new passwords are strong and unique, not previously used on any other platform.

• Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

• Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

For more specific help and instructions related to VF Corporation's data breach, please contact VF Corporation's support directly.

Where can I go to learn more?

If you want to find more information on the VF Corporation data breach, check out the following news articles:

• VF Corp's cyber incident causes data breach of 35.5 million consumers | Reuters

• VF Corp Says Data Breach Resulting From Ransomware Attack Impacts 35 Million - SecurityWeek

• Apparel Giant VF Corporation’s Ransomware Attack Leaked PII of over 35 Million Customers - CPO Magazine