Hackers Talked Their Way Into Three Levi Strauss Computers — Then Took Corporate Data

Levi Strauss & Co. disclosed in a filing with the U.S. Securities and Exchange Commission on August 7, 2026 that an unauthorized third party gained access to three company-issued computers through a social engineering attack — a method that manipulates an employee into granting access, rather than exploiting a software vulnerability directly. The attacker then exfiltrated certain corporate information from the compromised machines. Levi Strauss has not specified what type of data was taken.

The company said it contained the breach shortly after discovering it, and that the incident did not disrupt business operations. Levi Strauss also said it found no evidence that consumer data had been affected — an important distinction from breaches that expose customer payment or personal information, which typically carry heavier regulatory and reputational consequences for a retailer.

In the filing, Levi Strauss stated it does not believe the incident is reasonably likely to have a material impact on its business strategy, operations, financial condition, or results of operations — standard language in a disclosure of this kind, but one that signals the company assessed the scope as limited to the three compromised machines rather than a broader network compromise.

No hacking group has publicly claimed responsibility as of this writing, and Levi Strauss has not disclosed any ransomware involvement or ransom demand. The investigation remains ongoing. LEVI shares were essentially unchanged on the disclosure — a muted market reaction is common for a breach a company characterizes as contained and limited to corporate rather than consumer data, even when the disclosure itself is treated as material enough to require an SEC filing.