Vans Parent Company Cyberattack Impacts 35M

VF Corp., the parent company of brands such as Vans, Supreme, Timberland and the North Face, said hackers accessed the personal data of millions of customers in a December attack.

In an update to the company’s original filing to regulators, VF said it estimates the hackers stole the personal data of approximately 35.5 million individual consumers. 

While the nature of the personal data is not yet known, the company said it doesn’t store information such as social security numbers, bank details or payment cards.

VF also said it hadn’t detected any evidence that consumer passwords were compromised.

“While the investigation remains ongoing, as of the date of this Amendment, VF believes that the material impact…is limited to the material impacts on VF’s business operations,” the company wrote. 

The company added it will be “seeking reimbursement of costs, expenses and losses stemming from the cyber incident by submitting claims to VF’s cybersecurity insurers,” though the timing and amount of any such reimbursements are not yet known.

While VF said it is “still experiencing minor residual impacts from the cyber incident,” it added that the IT systems and data impacted have been “substantially restored.” 

At the time of the attack, VF said it was experiencing operational disruptions, including interrupted replenishment of store inventory and delayed order fulfillment, with the company saying the hackers had encrypted its IT systems.

Related:Boeing Cyberattack Highlights Need for Security Solutions

The announcement is just the latest in a spate of cyberattacks against major corporations, including Boeing, MGM and Comcast, which were all impacted between September and December last year alone.