Vans customers warned of potential fraud after data breach at parent company

Customers of the popular footwear brand Vans have been alerted to potential fraud or identity theft risks following a data breach at its parent company, VF Group. 

According to statements from Vans, VF Group disclosed that "unauthorized activities" were detected on a segment of its IT systems in December 2023. While detailed financial information or passwords were not compromised, the company cautioned that criminals might attempt to misuse the obtained customer data. 

VF Group, which also owns brands like Timberland, The North Face, and Dickies, has been approached by the BBC to clarify whether customers of these brands are also affected. 

In an email to its customers, Vans revealed that the data breach was initially identified by VF Group on December 13 and was attributed to external threat actors. The company promptly responded by shutting down affected IT systems and engaging cybersecurity experts, successfully mitigating the threat by December 15. 

The investigation unveiled that the incident impacted certain customers’ personal information typically stored for online purchases, including email addresses, full names, phone numbers, billing addresses, and shipping addresses. However, Vans assured customers that no payment or financial data, such as bank account or credit card information, was collected or retained, thus minimizing the risk of detailed financial exposure. 

Despite no reported instances of customer impact thus far, Vans cautioned customers about potential risks of identity theft, phishing, and fraud resulting from the breach. Customers were advised to exercise caution regarding suspicious emails, texts, and telephone calls soliciting personal information.