FEDERALUnknownRetail & ConsumerRetailLowResolved

VF Corporation

bd_9d5a70882ae1e5cd · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 1, 2023

Filed

May 23, 2024

To disclose

25 weeks

Affected

Not disclosed

Confidence

56%

Full breach record for VF Corporation →3 incidents on file

VF Corporation's Fiscal 2024 Form 10-K Item 1C references a previously disclosed December 2023 cybersecurity incident affecting its IT systems. The company states impacts were not material to financial condition or results of operations. VF is seeking reimbursement from cybersecurity insurers. No specifics on attack vector, affected individuals, or data types are provided in this Item 1C narrative.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 174 days

Dec 1, 2023

Begins

Dec 1, 2023

Discovered

May 23, 2024

Filed

vs. sector median

+15 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: VF Corporation
norm: vf
Domain: vfc.com

Name: VF Corporation
norm: vf
Domain: vfc.com
Industry: Retail & Consumerllm

Discovered: Dec 1, 2023
Breach occurred: Dec 1, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unknown

During the incident: Submitting claims to VF's cybersecurity insurers seeking reimbursement of costs, expenses and losses stemming from the Cyber Incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/103379/000010337924000008/vfc-20240330.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: May 23, 2024
Raw hash: 01311a49b8752b1a58850d4c8ff579cba47e9cf5e0e414f83bc5e1dc11e8926c

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html3.4 MB

Download View at source

Reporting entityVF Corporation

Victim entityVF Corporation

Incidentdiscovered Dec 1, 2023

Stated responseSubmitting claims to VF's cybersecurity insurers seeking reimbursement of costs, expenses and losses stemming from the Cyber Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing