Levi Strauss corporate data breach

Levi Strauss & Co. disclosed a cyber breach resulting from a social-engineering attack that targeted the company-issued computers of three employees. The unauthorized third party was able to view and exfiltrate “certain corporate information.”

In regulatory filings and company statements, Levi Strauss noted that preliminary investigations indicate no consumer data was affected and that the incident caused no disruption to business operations. The company expects the breach to have no material impact on its financial results. Following the detection of the intrusion, the company initiated containment measures, engaged external cybersecurity experts, and terminated the unauthorized access.

The incident occurs amid a broader trend of social-engineering campaigns targeting numerous companies. These tactics often involve attackers posing as IT support or colleagues to trick employees into providing credentials and multi-factor authentication codes. While researchers have identified groups such as UNC6671 involved in similar campaigns, no direct link has been confirmed between that group and the Levi Strauss breach.