Hackers hit Levi Strauss in cyberattack, corporate data stolen
The attackers used social engineering techniques on 3 employees to breach Levi Strauss.
Levi Strauss & Co. By OleksandrShnuryk via Shutterstock/Cybernews
- Levi Strauss said hackers used social engineering to access three employee devices and steal corporate data.
- The company says preliminary findings show no consumer data was viewed or copied during the breach.
- Levi Strauss notified affected victims and regulators, contained the intrusion, and hired outside cybersecurity experts.
- The company says operations continued normally and the incident is unlikely to materially affect its finances.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Levi Strauss & Co. has become the target of hackers, who infiltrated 3 company devices and stole corporate data.
The American clothing company says that it recently experienced a “cybersecurity incident” in which “an unauthorized third party” gained access to company files through social engineering.
Although Levi Strauss doesn’t say which social engineering techniques the attackers used, the company admits the attackers were successful and gained access to the devices of 3 company workers.
“Following such detection, the company initiated response protocols, implemented containment measures, launched an investigation, which remains ongoing, and engaged the services of third-party cybersecurity experts,” the 8-K Filing addressed to the Securities and Exchange Commission (SEC) says.
Although the investigation into the data breach is still ongoing, preliminary findings suggest that no consumer data was viewed or copied. Only corporate information that was stored on the workers’ devices has been accessed and exfiltrated. All affected victims and relevant regulators have been informed of the incident.
Levi Strauss believes its rapid response ensured the intrusion was successfully terminated and that no consumer data was affected. Furthermore, the company experienced no interruptions in its day-to-day business operations.
Based on information available as of the date of this filing, the company does not believe the incident has had, or is reasonably likely to have, a material impact on the company’s business strategy, operations, financial condition, or results of operations,the data breach notification concludes.
Levi Strauss & Co. designs, markets, and sells apparel and related accessories for men, women, and children internationally. The company was founded in 1853 and is headquartered in San Francisco, California.
According to the most recent numbers, Levi Strauss has over 19,000 employees on the roster and reported nearly $6.3 billion in revenues in 2025.
In June 2024, Levi Strauss was also hit by a data breach, involving over 72,000 affected accounts during an automated credential-stuffing attack.
