Vans, North Face owner data breach affects 35.5M customers

Vans, North Face data breach overview: 

• Who: The owner of apparel brands Vans, The North Face and Supreme disclosed in a regulatory filing that a December cyberattack caused a data breach that resulted in the information of more than 3.5 million of its customers being compromised. 
• Why: Ransomware and extortion gang ALPHV — also known as BlackCat — has taken responsibility for the North Face and Vans cyberattack. 
• Where: The data breach affects consumers nationwide.

The parent company of the apparel brands Vans and The North Face revealed last week that a December data breach compromised more than 3.5 million customers’ personal information. 

VF Corp., which also owns the apparel brand Supreme, reported the Vans and North Face data breach to regulators on Jan. 18. The company did not disclose what kind of information was exposed or whether it knows who was behind the incident, TechCrunch reports. 

The company did reportedly say it does not keep possession of Social Security numbers, bank account information or payment card information belonging to its customers and that no evidence was found that any password information was stolen. 

VF Corp. implied during a previous announcement that the North Face and Vans data breach was a ransomware attack, TechCrunch reports. The company said in its filing Thursday that the company is “still experiencing minor residual impacts from the cyber incident.” 

Ransomware and extortion gang ALPHV has taken responsibility for Vans, North Face data breach 

The ransomware and extortion gang ALPHV — also known as BlackCat — has reportedly taken responsibility for the data breach, with VF Corp. reportedly previously saying hackers were able to disrupt its operations “by encrypting some IT systems.” 

In its filing, VF Corp. said it has “substantially restored” IT systems and data that were impacted during the cyberattack, but that it continues to work through remaining “minor operational impacts.” 

“While VF is still experiencing minor residual impacts from the cyber incident, VF has resumed retail store inventory replenishment and product order fulfillment, and is caught up on fulfilling orders that were delayed as a result of the cyber incident,” the company said. 

Vans sued Walmart in March 2022 over allegations that the retailer infringed on its patents by selling “copycat” versions of its shoes. 

Have you been affected by the data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Dollar Bank class action alleges bank failed to protect private info inherited in merger
• Judge gives preliminary approval to Five Guys data breach settlement
• Fidelity National Financial class action claims company responsible for data breach affecting 1.3M
• 23andMe reportedly blames data breach on victims