VF Corp., the parent company of popular clothing brands Vans, Supreme and The North Face, said Thursday that hackers stole the personal data of 35.5 million customers in a cyberattack in December.
The Denver, Colorado-based company reported the data breach to regulators in a filing on Thursday. The filing did not specifically mention the types of personal data that was taken, or whether the company still knew what had been stolen. A VF Corp spokesperson did not respond. Colin Wheeler to an email from TechCrunch requesting more information.
VF Corp said it does not retain consumers’ Social Security numbers, bank account information, or payment card information for its consumer businesses, and the company has no evidence that hackers stole customers’ passwords.
VF Corp previously said hackers disrupted its operations “by encrypting certain IT systems,” implying a ransomware attack. A ransomware and extortion gang known as ALPHV (or BlackCat) later claimed responsibility for the hack.
VF said at the time of the accident it was experiencing operational disruptions and “its ability to execute orders.” in Deposited on ThursdayVF said it “is still experiencing minor residual effects from the cyber incident,” but has been able to fulfill orders that were delayed.
The company said it has “significantly restored IT and data systems impacted by the cyber incident, but continues to work through minor operational impacts.”
Do you work at VF Corp. Do you know more about cyber attacks? You can contact Zack Whittaker via email. You can also share files and documents with TechCrunch via our SecureDrop.