[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkMHnTpkdFVJZ19x6BoN5g7hCEaIBtKnK8hdrkmk4N54":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ce1e35c3-9fcb-4f30-9d9d-c9874278a021","Levi Strauss & Co. says hackers stole corporate data in cyberattack","levi-strauss-co-says-hackers-stole-corporate-data-in-cyberattack-e3210a","Levi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines. [...]","Levi Strauss & Co. has disclosed a cyberattack where hackers used social engineering tactics on three employees to steal corporate data. The company stated that its rapid response prevented the compromise of consumer data and that business operations were not interrupted. While no threat actors have claimed responsibility, some reports link the incident to UNC6671, a group associated with voice phishing attacks.","Levi Strauss & Co. reports corporate data theft via social engineering attack on employees.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Flevi-strauss-and-co-says-hackers-stole-corporate-data-in-cyberattack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F08\u002F07\u002Flevis.jpg","2026-08-07T15:48:20+00:00","2026-08-07T16:00:18.575135+00:00",7,[17,20,23,26],{"name":18,"type":19},"Levi Strauss & Co.","vendor",{"name":21,"type":22},"UNC6671","threat_actor",{"name":24,"type":25},"501-line jeans","product",{"name":27,"type":28},"social engineering","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,37,42],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},{"category":38},{"id":39,"icon":31,"name":40,"slug":41},"a53e88d4-7e4c-481a-b387-3ea4c84f4919","SEC Cyber Rules","sec-cyber",{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24],{"controls":50,"vendors":132},[51,80,109],{"slug":52,"name":53,"problem":54,"products":55},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"slug":81,"name":82,"problem":83,"products":84},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":110,"name":111,"problem":112,"products":113},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[114,120,125],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":115,"product_name":116,"url":118,"description":119},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":121,"product_name":122,"url":123,"description":124},"managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":110,"product_name":129,"url":130,"description":131},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":147},"social-engineering-attack-on-levi-strauss-highlights-human-vulnerability","Social Engineering Attack on Levi Strauss Highlights Human Vulnerability","Hackers exploited three Levi Strauss employees through social engineering (voice phishing) tactics to steal corporate data, demonstrating that even large enterprises remain vulnerable to human-targeted attacks. The root cause was insufficient employee resilience against sophisticated vishing techniques, not a technical vulnerability. While Levi's rapid response successfully contained the blast radius and protected consumer data, the incident underscores that employees remain the most targeted attack surface. Organizations must treat human-layer defenses with the same rigor as technical controls.",[138,139,140,141,142,143,144,145,146],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 17 – Incident Response Management","NIST SP 800-50 – Building an Information Technology Security Awareness and Training Program","NIST IR-2 – Incident Reporting","NIST AT-2 – Security Awareness Training","NIST AT-3 – Role-Based Security Training","NIST SP 800-61 – Computer Security Incident Handling Guide","ITIL – Service Desk and Incident Management","GDPR Article 32 – Security of Processing (organizational measures)",{}]