DisclosureLens
HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedIdentity (basic)PIILowContained

VF Outdoor, LLC

bd_9a968b933a88bb02 · schema v1 · pii pii-v2

Severity

Low

Discovered

Mar 13, 2025

Filed

Apr 4, 2025

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%
All records for VF Outdoor, LLC →4 incidents on file

Account takeover notice

VF Outdoor, LLC notified customers of unauthorized access to their accounts. The filing says: “Following a careful investigation, we concluded that an attacker had launched a small-scale credential stuffing attack against our Website on March 13, 2025.”

VF Outdoor, LLC (doing business as The North Face or Timberland) notified Nebraska residents of a credential stuffing attack on March 13, 2025. The attacker used credentials from another source to access user accounts. Affected data included names, email addresses, shipping addresses, and dates of birth. Payment card information was not compromised. The company disabled affected passwords and advised customers to change passwords on other sites.

Incident timeline

Mar 13, 2025

Begins

Mar 13, 2025

Discovered

Apr 4, 2025

Filed

This filing is one of 8 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Show 3 more filings ↓up to 55d gap

Filing propagation · 8 filings · 5 states

View merged incident ↗

Pattern: first filing Apr 1 (IL), last May 29 (VT) — a 58-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.