FEDERALUnknownRetail & ConsumerRetailLowResolved
VF Corporation
bd_9d5a70882ae1e5cd · schema v1 · pii pii-v1
Full breach record for VF Corporation →VF Corporation's Fiscal 2024 Form 10-K Item 1C references a previously disclosed December 2023 cybersecurity incident affecting its IT systems. The company states impacts were not material to financial condition or results of operations. VF is seeking reimbursement from cybersecurity insurers. No specifics on attack vector, affected individuals, or data types are provided in this Item 1C narrative.
Leak gap clock⏱ Leak >90d25 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
A leak claim by alphv about this victim predates this filing by 153 days.View originating leak claim
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/103379/000010337924000008/vfc-20240330.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- May 23, 2024
- Raw hash
- 01311a49b8752b1a58850d4c8ff579cba47e9cf5e0e414f83bc5e1dc11e8926c
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- VF Corporationnorm: vf
- Domain
- vfc.com
Victim entity
- Name
- VF Corporationnorm: vf
- Domain
- vfc.com
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Dec 1, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Unknown
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.