Levi Strauss & Co. has revealed a recent cybersecurity breach after an unauthorized third party gained access to company systems through a social engineering attack targeting three employees.
The apparel company said it discovered the incident and quickly launched its cybersecurity response procedures. Levi Strauss also brought in outside cybersecurity experts to investigate the attack and determine what information may have been accessed.
What Happened in the Levi Strauss Cyberattack?
According to the company’s preliminary investigation, hackers used social engineering techniques to gain unauthorized access to computers issued to three Levi Strauss employees.
The company believes that some corporate information was accessed and removed from its systems. However, Levi Strauss said its investigation is still ongoing, meaning the full scope of the breach has not yet been determined.
The company said it successfully contained and ended the unauthorized access. Importantly, Levi Strauss currently believes that consumer data was not affected.
The cybersecurity incident has also not disrupted the company’s normal business operations. Based on information available so far, Levi Strauss does not believe the breach will have a material impact on its financial condition, operations, or overall business strategy.
Levi Strauss Attack Part of Wider Cyber Campaign
The Levi Strauss breach comes as companies across the United States face an increasing number of cyberattacks.
Security researchers have observed a wider campaign involving voice phishing, also known as vishing. In these attacks, cybercriminals use phone calls to pretend to be IT support staff, company officials, or other trusted individuals. The goal is to trick employees into providing access or information that can help attackers enter corporate systems.
Internet intelligence data suggests that hackers have created infrastructure designed to target more than 200 companies in recent weeks. The targets reportedly include major brands and financial institutions.
Why the Levi Strauss Breach Matters
The incident highlights the growing importance of employee cybersecurity training. Even strong technical security systems can be weakened when attackers successfully manipulate employees.
Companies are increasingly using multi-factor authentication, employee training, identity protection, and stronger access controls to reduce the risk of social engineering attacks. For now, Levi Strauss says the breach has been contained and that consumer information was not impacted, but its investigation remains ongoing.
