Corporate Data Stolen in Levi Strauss Cyberattack

Denim company Levi Strauss & Co on Friday disclosed a cyberattack that affected certain corporate data stored on employee computers. The incident, it said in a Form 8-K filing with the US Securities and Exchange Commission (SEC), was the result of social engineering and affected three employees’ company-issued computers. The company says its immediate response and containment actions have resulted in the attackers’ eviction from the compromised computers. “Based on preliminary findings from the company’s investigation, the company believes that certain corporate information was accessed and exfiltrated as a result of the incident,” Levi Strauss told the SEC. According to the company, the investigation into the attack is ongoing, but based on the preliminary findings no customer data appears to have been stolen. “The company has not experienced any interruption in business operations as a result of the incident,” Levi Strauss said. The company also said it did not believe that the incident “has had, or is reasonably likely to have, a material impact”. Levi Strauss did not say who was behind the attack or whether it received any extortion demands, and has not shared details on the type of social engineering the threat actor used. According to some unconfirmed reports, however, UNC6671, a hacking group behind multiple recent voice phishing (vishing) campaigns, might have been involved. SecurityWeek has emailed Levi Strauss for additional details on the data breach and will update this article if the company responds. Related: 3.8 Million Impacted by Unlimited Technology Systems Data Breach Related: Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack Related: Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers Related: Google Adopts New Threat Actor Naming System