Levi Strauss & Co. has disclosed a cybersecurity incident in which an unauthorized third party gained access to company systems after a social-engineering attack targeted three employees. The attackers accessed company-issued computers and exfiltrated certain corporate information, according to the company’s regulatory disclosure.
The incident adds Levi Strauss to a growing list of major companies facing attacks that rely on manipulating employees rather than exploiting a newly disclosed software vulnerability. The company has not publicly detailed exactly what corporate information was taken or identified the attackers.
Levi Strauss said the incident did not disrupt its business operations and that it does not currently expect the event to have a material impact on the company. Its investigation remains ongoing.
Social Engineering កំណត់គោលដៅបុគ្គលិក Levi Strauss 3 នាក់
According to reporting based on Levi Strauss’s disclosure to the U.S. Securities and Exchange Commission, the unauthorized party gained access through social engineering directed at three employees. The company initiated its response protocols, implemented containment measures and launched an investigation after discovering the incident.
The precise social-engineering technique has not been publicly confirmed. It is therefore not known whether the initial approach used email phishing, voice phishing or another method. What has been disclosed is that the intrusion resulted in access to corporate systems and the exfiltration of certain corporate information.
Levi Strauss ថាប្រតិបត្តិការអាជីវកម្មមិនត្រូវបានរំខាន
Levi Strauss said the cybersecurity incident did not cause an interruption to business operations and that it does not expect a material impact. The company has also not publicly specified the volume or exact categories of corporate information taken, leaving important details unresolved while the investigation continues.
ហានិភ័យទូលំទូលាយពី Voice Phishing Extortion
Levi Strauss has not named a threat actor, and no group had publicly claimed responsibility in the reporting reviewed. TechRadar noted speculation around UNC6671, a financially motivated threat cluster associated with data-theft extortion using voice phishing, but that attribution has not been confirmed by Levi Strauss. The case highlights how social engineering can bypass technical defenses by targeting employees and trusted access directly.
