North Face
Disclosed May 29, 20251 year agoConfirmed
Credential stuffing attack hits The North Face customer accounts
VF Outdoor said a small-scale credential stuffing attack on thenorthface.com on April 23, 2025 exposed account holders' names, purchase histories, shipping addresses, emails, birth dates and phone numbers; payment data was not stored.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 29, 2025 |
| Discovered | Apr 23, 2025 |
| Attack | Credential stuffing |
| Data exposed | Names, Addresses, Emails, Dates of birth, Phone numbers, Other |
| Sector | Retail · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont AG: VF Outdoor data breach noticeago.vermont.gov · Regulator | Regulator |
| The North Face warns customers of April credential stuffing attackbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 29, 2025 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.