VF Corp Loses 35.5M Personal Data In Cyberattack, CEO Says No Payment Info Compromised

VF Corp VFC confirmed Thursday, Jan. 18, that it detected unauthorized occurrences on some of its information technology (IT) systems.

Per an ongoing investigation and remediation efforts, VF believes the threat actor was ejected from its IT systems on December 15, 2023.

Based on the company’s preliminary analysis, VF estimates that the threat actor stole the personal data of around 35.5 million individual consumers.

However, VF does not collect or retain any consumer social security numbers, bank account information, or payment card information of customers in its IT system and has not detected any evidence to date that the threat actor acquired any consumer passwords.

As of Jan. 18, VF stated that its operated retail stores, brand e-commerce sites, and distribution centers are operating with minimal issues. 

Since filing the original report on Dec. 13, 2023, VF has substantially restored the IT systems and data that were impacted by the cyber incident. It continues to work through minor operational impacts. 

The company will report third-quarter fiscal 2024 financial results on Feb. 6, 2024.

Price Action: VFC shares are trading higher by 0.75% at $15.44 on Friday’s last check.

Now Read: This Gutsy Trader Made About $7M In Just 3 Hours On Heels Of SatoshiVM Token Launch

Image: Shutterstock