Breachesby GlyphNorth Face
Disclosed May 29, 2025Confirmed
Credential stuffing attack hits The North Face customer accounts
VF Outdoor said a small-scale credential stuffing attack on thenorthface.com on April 23, 2025 exposed account holders' names, purchase histories, shipping addresses, emails, birth dates and phone numbers; payment data was not stored.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | May 29, 2025 |
| Discovered | Apr 23, 2025 |
| Attack | Credential stuffing |
| Data exposed | NamesAddressesEmailsDates of birthPhone numbersOther |
| Sector | Retail · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.