VF Outdoor, LLC
bd_a095d154f34a4bcb · schema v1 · pii pii-v1
All records for VF Outdoor, LLC →4 incidents on fileAccount takeover notice
VF Outdoor, LLC notified customers of unauthorized access to their accounts. The filing says: “We believe that on October 8, 2020 and October 9, 2020 we were subject to a credential stuffing attack, in which the attacker gained access to email addresses and passwords from another source and used those as credentials to access user accounts on thenorthface.com.”
VF Outdoor (The North Face) reported a credential stuffing attack on thenorthface.com occurring October 8-9, 2020. The attacker accessed user accounts using stolen credentials, viewing names, addresses, VIPeak points, and purchase history. Payment card data was tokenized and not accessed. 34,582 individuals were affected (59 in Delaware). Notices were sent November 5, 2020.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 8, 2020
Begins
Oct 9, 2020
Discovered
Nov 5, 2020
Filed
vs. sector median
6 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- California State AGbd_0209420b689cb2a22020-11-05Verified
- Oregon State AGbd_4b3f3642dc27ab492020-11-05Candidate
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.