Levi Strauss & Co. reports data breach following social engineering attack

Levi Strauss & Co. has reported a major cyber security incident in which threat actors used social engineering techniques to gain unauthorised access to the company’s internal network and exfiltrate sensitive corporate information.

 

In a recent filing with the U.S. Securities and Exchange Commission (SEC), American apparel company Levi Strauss & Co. disclosed a cyber security incident in which an unauthorised third party gained access to company files after using social engineering techniques. The incident enabled the threat actor to obtain unauthorised access to three employees’ company-issued computers.

 

Following the incident, the company immediately launched an investigation, with assistance from external cyber security experts, to determine the scope of the incident.

 

It also activated its incident response and business continuity protocols and notified law enforcement authorities about the incident.

 

“Based on preliminary findings from the Company’s investigation, the Company believes that certain corporate information was accessed and exfiltrated as a result of the incident. 

 

“As of the date of this filing, the Company believes that its rapid response efforts successfully contained and terminated the unauthorised access, and that no consumer data was impacted,” Levi Strauss & Co said.

 

The apparel company further stated that, despite the security incident and unauthorised access to its systems, the breach did not result in any disruption to its day-to-day business operations. The company said its normal activities and services continued without significant impact following the incident.

 

“Based on information available as of the date of this filing, the Company does not believe the incident has had, or is reasonably likely to have, a material impact on the Company’s business strategy, operations, financial condition, or results of operations.

 

“The Company has provided and will provide notifications to affected parties and applicable regulators as appropriate and in accordance with applicable law,” Levi Strauss & Co added.

 

 

Although Levi Strauss & Co. did not reveal the identity of the threat actors behind the cyber attack, multiple media reports have linked the incident to UNC6671, a financially motivated threat group known for using voice-phishing and social engineering tactics to compromise organisations. Google’s Threat Intelligence Group (GTIG) has associated UNC6671 with recent campaigns targeting hundreds of organisations, in which attackers sought to obtain employee credentials and access sensitive corporate systems and data.