Reported by 2 outlets

Timeline

1. original reporting

   Levi Strauss Details Social-Engineering Breach in SEC Filing — Corporate Data Stolen, No Consumer Data

   securityweek.com · 65d ago · August 10th, 2026

   Levi Strauss & Co. disclosed in an August 7 Form 8-K that attackers used social engineering against three employees to access company-issued computers and exfiltrate "certain corporate information"; the company says the intrusion was contained with no consumer data affected and no interruption to business operations. The filing names no threat actor, delivery mechanism, or ransomware/extortion activity, and says the company has notified affected parties and regulators as required. The incident is a reminder that a handful of compromised endpoints can create enterprise-wide exposure when users hold access to documents, cloud storage, and identity services — phishing-resistant MFA and conditional access remain the controls that contain this class.

   ---

2. update from gbhackers.com

   Levi Strauss Hit by Cyberattack, Hackers Use Social Engineering to Steal Corporate Data

   gbhackers.com · 65d ago · August 10th, 2026

   has reported a cybersecurity incident in which an unauthorized third party used social engineering techniques to compromise three employee-issued computers and exfiltrate unspecified corporate information. According to the apparel maker, the intrusion was contained, with no evidence that consumer data was affected or that business operations were disrupted. Securities and Exchange Commission on August 7, Levi Strauss disclosed that it recently detected unauthorized access to company files after attackers manipulated employees using undisclosed social engineering methods. The filing does not reveal the identity of the threat actor, the timeline of the intrusion, or the types and volume of corporate data accessed and stolen. The San Francisco-based company activated its incident-response procedures upon detecting the breach, implemented containment measures, and engaged external cybersecurity experts to support the ongoing investigation. The breach involved three company-issued computers, illustrating how human-targeted attacks can provide adversaries with an entry point without requiring publicly disclosed software exploits or infrastructure vulnerabilities. The company indicated that the attackers gained access through social engineer

3. mentioned by securityweek.com

   Corporate Data Stolen in Levi Strauss Cyberattack

   securityweek.com · 64d ago · August 10th, 2026