Levi Strauss Says Social Engineering Led to Corporate Data Theft
Summary
Levi Strauss says social engineering targeting three employees led to corporate data being accessed and exfiltrated. The company reports the access was contained, no consumer data was affected, and its investigation is ongoing.
Key points
- Levi Strauss disclosed the incident in a filing with the U.S. Securities and Exchange Commission.
- The company says an unknown attacker socially engineered three employees, leading to unauthorized access to company-issued computers.
- Preliminary findings indicate corporate information was accessed and exfiltrated.
- Levi Strauss says its response contained and terminated the unauthorized access and that no consumer data was affected.
- The company reports no business interruption or operational disruption; its investigation is ongoing.
- Some media outlets linked the incident to UNC6671, but Levi Strauss did not identify an attacker and BleepingComputer found no actor claim.
Article Details
- Victim Organization
- Levi Strauss & Co.
- Incident Type
- Social engineering of three employees followed by unauthorized access to company-issued computers and believed exfiltration of corporate information.
- Data Types Exposed
- Corporate information; specific data types were not disclosed.
- Operational Impact
- Levi Strauss & Co. reported no interruption to business operations and said its response contained and terminated the unauthorized access. The investigation remains ongoing.
- Claim Status
- confirmed