Levi Strauss & Co. says hackers stole corporate data in cyberattack
Levi Strauss & Co. reports corporate data theft via social engineering attack on employees.
Levi Strauss & Co. has disclosed a cyberattack where hackers used social engineering tactics on three employees to steal corporate data. The company stated that its rapid response prevented the compromise of consumer data and that business operations were not interrupted. While no threat actors have claimed responsibility, some reports link the incident to UNC6671, a group associated with voice phishing attacks.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Levi Strauss & Co.?
Get an email when a new story names Levi Strauss & Co., usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonHackers exploited three Levi Strauss employees through social engineering (voice phishing) tactics to steal corporate data, demonstrating that even large enterprises remain vulnerable to human-targeted attacks. The root cause was insufficient employee resilience against sophisticated vishing techniques, not a technical vulnerability. While Levi's rapid response successfully contained the blast radius and protected consumer data, the incident underscores that employees remain the most targeted attack surface. Organizations must treat human-layer defenses with the same rigor as technical controls.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.