VF Corp, Owner of Vans and Supreme, Reports Data Breach and Supply Chain Disruption from Alleged Ransomware Attack

VF Corporation, the U.S.-based owner of apparel brands including Vans, Supreme, and The North Face, confirms cyberattack ahead of Christmas, impacting orders. The company first detected the cyberattack on December 13, resulting in disruptions to operations, including the ability to fulfill orders. The attack involved encrypting IT systems and stealing data, likely a ransomware attack. As a result, orders are delayed, with estimated delivery dates incorrect. Retail stores remain open, and consumers can purchase available merchandise online. However, the company has not disclosed when orders are expected to ship or if a ransom demand was made. It’s unclear how many individuals are affected, and the full impact of the incident is still unknown. The cyberattack will have a “material impact” on the business until systems are recovered. The disclosure comes on the same day as the U.S. Securities and Exchange Commission’s new data breach disclosure rules, requiring organizations to report cybersecurity incidents within four business days.