Cybersecurity NewsNews

Timberland, Supreme Loses Customer’s Data to Ransomware


VF Corporation, the parent company of popular brands such as Vans, Timberland, The North Face, Dickies, and Supreme, reported a significant data breach resulting from a ransomware attack in December. According to the company, more than 35 million customers had their personal information compromised.

Bank Details Among Data Timberland Lost

The exposed data did not include sensitive information such as social security numbers, bank account details, or payment card information, as VF Corporation does not store such data on its systems.

In an 8-K form filed with the U.S. Securities and Exchange Commission (SEC), VF Corp stated, “Based on VF’s preliminary analysis from its ongoing investigation, VF currently estimates that the threat actor stole personal data of approximately 35.5 million individual consumers. VF has not detected any evidence to date that the threat actors acquired any consumer passwords”

The ransomware attack, disclosed in a December 15 SEC filing, disrupted VF Corp’s business operations by encrypting some IT systems and stealing personal data. The incident led to the shutdown of certain systems, impacting retail store inventory replenishment, order fulfillment delays, customer order cancelations, and disruptions in wholesale shipments.

While VF Corp has substantially restored the encrypted IT systems, it is still addressing minor operational impacts. The company believes the threat actor left its IT systems on December 15, 2023. Retail stores, branded e-commerce sites, and distribution centers are operating with minimal issues as of the latest SEC filing.

Despite the significant breach, VF Corp has not yet informed affected customers through its official channels, and specific details about the nature of the compromised data and whether it extends to employees, suppliers, resellers, and partners have not been disclosed. The company is actively cooperating with federal law enforcement and regulatory authorities in its ongoing investigation.

VF Corporation, headquartered in Colorado, is a major player in the apparel industry with an annual revenue of $11.6 billion and a workforce of 35,000. Apart from the mentioned brands, it also owns several other globally recognized labels.