UnknownRetail & ConsumerRetailMedium
VF Corporation
bd_f648e3c5ed46091f · schema v1 · pii pii-v1
Full breach record for VF Corporation →VF Outdoor, LLC (a VF Corporation outdoor brands subsidiary) reported a data breach to the Maine Attorney General. The breach occurred and was discovered on 2025-03-13, affecting 15,713 individuals total, including 27 Maine residents. The cause was reported only as 'Other' with no specific information categories enumerated on the form. Electronic consumer notifications were sent on 2025-04-04. Identity theft protection services were not offered. Outside counsel: Andrew Serwin, DLA Piper LLP (US).
Leak gap clock✗ Leak >180d22 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 469 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7a61bbf9690c8142California State AGfiled 2025-04-04Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/792aded4-8b07-4c1d-86ac-5ae24253b722.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2025
- Raw hash
- e76109d4779938c8da0b4eff467f5bd45794c457f7a53f1ba28d867f1cb291c4
Reporting entity
- Name
- DLA PIPER LLP (US)norm: dla piper llp us
Victim entity
- Name
- VF Corporationnorm: vf
- Domain
- vfc.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Mar 13, 2025
- Materiality determined
- —
- Notification sent
- Apr 4, 2025
- Affected individuals
- 15,713
- Data types
- —
- Attack vector
- Unknown
- Regulator citations
- Maine Attorney General notification filed 2025-04-04
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 22d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 13, 2025→ Filed with AG: Apr 4, 202522d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.