Customer accounts compromised on The North Face US website
In April 2025, The North Face's US website was hit by a credential stuffing attack that compromised customer accounts. The attackers may have accessed names, shipping addresses and order histories, while customers' credit card information was confirmed to be safe. The company reset the passwords of the affected accounts.
Key facts
- Affected organization
- The North Face
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer accounts compromised; possible access to names, shipping addresses and order histories
- Cause / method
- Credential stuffing attack
- Location
- United States
If your data was exposed
Exposed dataNameAddressUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The compromise of customer accounts in April and the related password resets came to light.
- It came to light that The North Face customers' personal information had been compromised in a cyberattack.
5 related reports
- Cyberattacks Hit Victoria’s Secret, North Face and Cartier
- Credential stuffing incident at The North Face
- North Face Is Latest Cyberattack Victim: Customer Credit Card Data Safe Remains Safe
- The North Face customers’ personal information compromised in cyber attack
- Victoria’s Secret restores critical systems after cyberattack
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.