VF Corp reports 35.5M consumer personal data stolen in Dec 2023 cyber incident

V F CORP

Threat actor ejected Dec 15, 2023; retail stores, e-commerce, distribution centers operating with minimal issues.
Personal data of approx 35.5M individual consumers stolen; no SSNs, bank account, or payment card info.
No evidence that consumer passwords were acquired by the threat actor.
Business disruptions (retail replenishment, order fulfillment) resolved; minor residual impacts remain.
VF believes breach not material to financial condition; seeking insurance reimbursement.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

V F CORP disclosed a cybersecurity incident: Unauthorized occurrences on a portion of its IT systems, theft of personal data of approximately 35.5 million individual consumers. Impact: Disruption to operations including interrupted replenishment of retail store inventory and delayed order fulfillment; impacts are no longer ongoing and are not material to financial condition and results of operations. Company determined it not material. Discovered 2023-12-13.

Nature: Unauthorized occurrences on a portion of its IT systems, theft of personal data of approximately 35.5 million individual consumers
Impact: Disruption to operations including interrupted replenishment of retail store inventory and delayed order fulfillment; impacts are no longer ongoing and are not material to financial condition and results of operations
Materiality: not material
Discovery: 2023-12-13

Exact text from the filing

As of the date of this Amendment, VF also believes the impacts of the cyber incident are not material and are not reasonably likely to be material to its financial condition and results of operations.

View on SEC.gov

2 cybersecurity incidents filed in the last 30 days. Browse all cybersecurity incidents →

V F CORP filing history →

Source: SEC EDGAR

accession 0001193125-24-010243

view filing index on sec.gov

view primary document

Machine-readable: JSON · Markdown · Plain text

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.