Cyber News Gator

Vans, the renowned footwear brand, has issued a cautionary notice to its customers regarding potential fraud or identity theft risks following a data breach within its parent company, VF Group.

The breach, discovered in December 2023, uncovered “unauthorized activities” on a segment of VF Group’s IT systems, as disclosed by Vans.

Although no detailed financial information or passwords were compromised, Vans stated the possibility of cybercriminals exploiting the acquired customer data.

VF Group, which also boasts brands like Timberland, The North Face, and Dickies, is yet to confirm if customers of these brands are affected by the breach.

In an email alert sent to its customers, Vans revealed that the breach was initially detected by VF Group on December 13, attributed to external threat actors.

Immediate measures were taken to contain the threat, including the shutdown of affected IT systems and the engagement of cybersecurity experts. By December 15, the hackers were successfully expelled from the systems.

The compromised personal information includes email addresses, full names, phone numbers, billing, and shipping addresses. However, Vans clarified that no payment or financial data, such as bank account or credit card information, was collected or retained, ensuring the non-exposure of detailed financial information.

Although there have been no reported cases of affected customers thus far, Vans cautioned that the breach could potentially lead to identity theft, phishing attempts, and general fraud. Customers are advised to remain vigilant against suspicious emails, texts, and phone calls requesting personal information.

Vans has initiated contact with relevant law enforcement agencies and has pledged to review its cybersecurity protocols in response to the incident.