Levi Strauss says hackers breached employee computers, accessed corporate data
Levi Strauss & Co. disclosed on Friday that suspected hackers gained unauthorized access to company files after compromising employees' computers, making the iconic American apparel maker the latest retailer to report a cybersecurity incident.
In a filing with the U.S. Securities and Exchange Commission, the denim company said an unauthorized third party accessed and exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack. The company did not specify what type of corporate data was taken.
Levi Strauss said it contained the breach shortly after discovering it, the incident did not disrupt business operations, and there was no evidence that consumer data had been affected.
"The company does not believe the incident has had, or is reasonably likely to have, a material impact on its business strategy, operations, financial condition, or results of operations," it said in the filing.
The company did not identify the attackers, disclose whether ransomware was involved, or say whether it had received a ransom demand. No hacking group has publicly claimed responsibility for the incident, and the investigation remains ongoing.
The San Francisco-based company is best known for its Levi's denim brand. It operates nearly 3,300 retail stores worldwide, employs approximately 19,000 people, and generated $6.3 billion in net revenue last year. It has a market capitalization of more than $9 billion.
The disclosure comes as retailers continue to face growing cyberthreats. Earlier this week, Dutch luxury department store chain De Bijenkorf said a cyberattack affecting one of its logistics providers delayed customer orders, returns, and refunds while potentially exposing customer information.
Fast-fashion retailer Mango and outdoor clothing brand The North Face disclosed data breaches last year. British retailers Harrods, M&S and The Co-op also faced cybersecurity incidents in 2025.
The FBI and other authorities have continued to warn companies about the rise of social engineering campaigns by cybercriminals.
Read More: Military device manufacturer discloses cyber incident to SEC
References in this story
- Dutch retailer De Bijenkorf warns customer data may be exposed after cyber incident therecord.media Amsterdam-based luxury goods chain De Bijenkorf is the latest retailer to announce a cyber incident involving a third-party logistics provider.
- Mango says some customer information exposed in cyber incident therecord.media Spain-based fashion chain Mango reported a data breach that exposed customer information but did not appear to affect internal corporate systems.
- Nearly 3,000 North Face website customer accounts breached as retail incidents continue therecord.media The parent company of apparel brand The North Face sent data breach notification letters to about 3,000 customer accounts, saying attackers used the technique known as credential stuffing.
- Harrods becomes latest retailer to announce attempted cyberattack therecord.media London retailer Harrods said it had “recently experienced attempts to gain unauthorised access to some of our systems” but its security team "immediately took proactive steps to keep systems safe.”
- Cyberattack ate up profits for first half of year, retailer M&S says therecord.media British retailer Marks & Spencer (M&S) said a cyberattack earlier this year was an "extraordinary" moment for the company, nearly wiping out profits.
- Cyberattack on British retailer Co-op shaved about $275 million from revenues, company says therecord.media In an earnings report, retailer The Co-op said its revenues took a hit of £206 million (about $274 million) from a cyberattack in April.
- FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks therecord.media The law enforcement agency published an advisory on Thursday about Kali365 — a Telegram-based service for cybercriminals that allows them to capture legitimate "OAuth" tokens enabling widespread access to Microsoft 365…
- Military device manufacturer discloses cyber incident to SEC therecord.media IEH Corporation — which produces specialized products used in military satellites, missiles and fighter jets — said it discovered a cyberattack on Tuesday and immediately tried to contain it.
- Advanced Cyber Threat Intelligence | Recorded Future www.recordedfuture.com Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your organization.
- Daryna Antoniuk (@darynant.bsky.social) bsky.app Cybersecurity Reporter at Recorded Future News. Ex at The Kyiv Independent/Forbes/The Kyiv Post 📍Kyiv, Ukraine
