VF Corporation

VF Outdoor, LLC (The North Face, Timberland) notified consumers of a credential stuffing attack on March 13, 2025. Attackers used stolen credentials to access accounts. Compromised data included names, emails, passwords, addresses, and DOBs. No payment card data was compromised. VF disabled passwords and advised users to reset them.

VF Outdoor, LLC (doing business as The North Face) disclosed a credential stuffing attack on thenorthface.com discovered on April 23, 2025. Attackers used credentials stolen from other sources to access user accounts. Compromised data may include names, email addresses, passwords, shipping addresses, and payment preferences. No payment card numbers were stored or compromised. VF Outdoor disabled passwords and notified affected consumers.