HackingRetail & ConsumerRetailStolen CredentialsCREDENTIALSPIILowResolved
VF Corporation
bd_7d4bed9d72ecad10 · schema v1 · pii pii-v1
Full breach record for VF Corporation →VF Outdoor, LLC, the parent company of brands like Vans and The North Face, experienced a credential stuffing attack. Attackers used stolen usernames and passwords from other breaches to gain unauthorized access to customer accounts.
Maine clockDiscovered Aug 11, 2022 → Filed with AG Sep 6, 202226d ✓ ME AG ≤30d26 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3de93dca39660db2Oregon State AGfiled 2022-09-06Verified
- bd_5b713f4a386a366dCalifornia State AGfiled 2022-09-05(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b74fc18b-e017-4b0e-ad67-0262ab11b79e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 6, 2022
- Raw hash
- f751673f18f28abbdd89cbae69578d10adeee93c559f5d25e5211401ab021f55
Reporting entity
- Name
- VF Corporationnorm: vf
- Domain
- vfc.com
Victim entity
- Name
- VF Corporationnorm: vf
- Domain
- vfc.com
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Aug 11, 2022
- Materiality determined
- —
- Notification sent
- Sep 5, 2022
- Affected individuals
- 160
- Data types
- CREDENTIALSPII
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 11, 2022→ Filed with AG: Sep 6, 202226d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.