Second Attack In 2 Months For VF Outdoor
For the second time over a two-month period, Denver, Colorado-based VF Outdoor LLC, suffered a credential stuffing attack against one of its brands, this time The North Face.
“On April 23, 2025, we discovered unusual activity involving our website, thenorthface.com, which we investigated immediately,” the company said in a letter to victims. “Following a careful and prompt investigation, we concluded that an attacker had launched a small-scale credential stuffing attack against our website on April 23, 2025.”
A credential stuffing attack is a specific type of cybersecurity attack where the threat actor uses account authentication credentials stolen from another source, such as a breach of another company or website, to gain unauthorized access to user accounts.