F500 Misc Remainder · Apparel · Data breach
VF
Headline
VF Corporation - The North Face, Vans, Timberland, Dickies - disclosed a major breach affecting a very large number of consumers, with reporting citing on the order of 35 million records, that disrupted order…
VF Corporation - The North Face, Vans, Timberland, Dickies - disclosed a major breach affecting a very large number of consumers, with reporting citing on the order of 35 million records, that disrupted order fulfilment during the holiday season. The multi-brand structure is the note: a customer with accounts at what feel like four unrelated outdoor and apparel brands has one profile with one parent, and one incident reaches all of them.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. www.securityweek.com/vf-corp-says-data-breach-resulting-from-ransomware-attack-impacts-35-million/ — Verified - primary source confirmed.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected where a direct consumer relationship exists.
Data sharing
CONFIRMED BREACH: VF disclosed in a January 18, 2024 SEC Form 8-K that a December 2023 ransomware attack affected approximately 35.5 million consumers and disrupted order fulfilment; no specific data-privacy lawsuit independently confirmed this pass. VF sells apparel and footwear brands (e.g., The North Face, Vans, Timberland) through retailers and through its own brand e-commerce websites, so it holds consumer order and account data, as the 35.5 million-consumer breach shows.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
| Claim | Kind | Support | Sources |
|---|---|---|---|
| 1. VF Corporation owns The North Face, Vans, Timberland and Dickies. | fact | unknown | none recorded |
| 2. VF disclosed a major breach affecting a very large number of consumers. | fact | supported | none recorded |
| 3. Reporting cited on the order of 35 million records. | fact | supported | none recorded |
| 4. The breach disrupted order fulfilment during the holiday season. | fact | unknown | 1 (0 confirmed) |
| 5. One incident at a multi-brand parent reaches customers of all its brands. | characterization | n/a | none recorded |
0 of 5 claims have a confirmed source of their own.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| reporting · 2024-01-19 www.securityweek.com/vf-corp-says-data-breach-resulting-from-ransomware-attack-impacts-35-million/ | Claim 4 | Unassigned | corrected | “order fulfillment was delayed, which resulted in order cancellations” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy See VF's own published privacy policy | Not fetched yet | NOT CONFIRMED |
| Terms of service See VF's own published terms of service | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source https://www.securityweek.com/vf-corp-says-data-breach-resulting-from-ransomware-attack-impacts-35-million/ Verification: Verified - primary source confirmed | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.