The North Face Fumbles Again: Another Credential Stuffing Attack Strikes!
The North Face is in hot water again with a credential stuffing attack, their fourth since 2020. Customers’ personal details like full names, purchase history, and more were exposed, but payment info remained safe. This latest blunder highlights the brand’s ongoing struggle with cybersecurity.

Hot Take:
Looks like The North Face might want to consider renaming itself to “The Data Breach” after yet another credential stuffing attack! Forget climbing mountains; it’s time to climb the cybersecurity ladder and maybe finally reach the peak of multi-factor authentication.
Key Points:
- The North Face has faced a credential stuffing attack, impacting user accounts.
- This is the fourth such incident since 2020, highlighting a pattern of cybersecurity challenges.
- Personal information like names, purchase history, and contact details were exposed, but payment info was safe.
- The attack was discovered on April 23, 2025, and customers are being notified.
- Previous attacks have also impacted The North Face and its parent company VF Corporation’s websites.
Already a member? Log in here