VF Corporation

vfc.com

CONFIRMED

VF Corporation (parent of Vans, The North Face, and Timberland) filed Form 8-K Item 1.05 following an ALPHV ransomware attack compromising 35.5 million customer records.

Observable Status CONFIRMED

Industry / Sector Retail & Consumer Goods

Incident Classification Ransomware Extortion & Encryption

Attributed Threat Actor ALPHV / BlackCat

Affected Population 35,500,000 records

First Seen 2023-12-13

Last Updated 2024-01-18

Compromised Data Classes:

Customer Personal Information Order History Records Account Contact Details Order Records Account Details

Statutory Regulatory Filings:

U.S. Securities and Exchange Commission (SEC): Form 8-K Item 1.05 (Material Cybersecurity Incidents) (0000103379-23-000039)

OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

98% CONFIDENCE

1. Primary Authority CONFIRMED BY REGULATOR Base weight: 65%

2. Evidence Specificity +23% Statutory Filing Verified

3. Corroboration Curve +7% 2 independent domains

4. Timeline & Staleness +3% 3 milestones logged

Corroborated Source Domains:

vfc.com sec.gov

STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing

Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, CISA). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.

U.S. Securities and Exchange Commission (SEC)

Form 8-K Item 1.05 (Material Cybersecurity Incidents)

CONFIRMED BY REGULATOR

Docket / Accession ID 0000103379-23-000039

Statutory Filing Date 2023-12-15

Disclosed Impact 35,500,000 records

Evidence Standard Regulatory Ground Truth

Statutory Filing Details & Summary (Preserved As Filed):

Item 1.05 Material Cybersecurity Incident disclosure filed by V.F. Corporation reporting threat actor disruption of commercial operations, fulfillment systems, and exfiltration of personal consumer data.

View Official Regulatory Filing Document https://www.sec.gov/Archives/edgar/data/103379/000010337923000039/vfc-20231215.htm

Technical Forensic Briefing

Incident Overview

VF Corporation (parent of Vans, The North Face, and Timberland) filed Form 8-K Item 1.05 following an ALPHV ransomware attack compromising 35.5 million customer records.

Compromised Assets & Data Scope

Primary Data Classes: Customer Personal Information, Order History Records, Account Contact Details.
Disclosed Affected Population: Approximately 35,500,000 individuals or records.

Statutory Disclosures & Compliance

Statutory filing submitted to SEC (Form 8-K (Item 1.05)) under accession 0000103379-23-000039.

Milestone Timeline (3 events logged)

2023-12-13 19:00 UTC

CONFIRMED BY TARGET

Threat actor encrypts operational IT systems and exfiltrates corporate data from apparel conglomerate VF Corp.

Source: VF Corporation Incident Briefing

2023-12-18 17:30 UTC

CONFIRMED BY REGULATOR

VF Corp files Form 8-K Item 1.05 disclosing material disruption to retail logistics and e-commerce order processing.

Source: SEC EDGAR 8-K Item 1.05 (Adsh 0000103379-23-000039)

2024-01-18 18:00 UTC

CONFIRMED BY REGULATOR

Form 8-K Item 1.05 update confirms 35.5 million individual customer records compromised during the intrusion.

Source: SEC EDGAR 8-K Item 1.05 Update (Adsh 0000103379-24-000003)

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub