All Breaches
December 13, 2023 Verified Retail

VF Corporation Data Breach

On December 13, 2023, global apparel and footwear company VF Corporation (vfc.com), parent of Vans, The North Face, Timberland, and Dickies, detected a ransomware attack that encrypted internal IT systems and exfiltrated consumer records.

35.5 Million
Affected People
5
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

5
  • Names
  • Email addresses
  • Phone numbers
  • Physical addresses
  • Purchases

About This Breach

According to a Form 8-K/A filing submitted to the U.S. Securities and Exchange Commission (SEC) and subsequent state breach notifications, personal data belonging to approximately 35,500,000 consumers was exposed, including full names, email addresses, phone numbers, billing and shipping addresses, and order history details.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information