Levi Strauss says hackers breached employee computers, accessed corporate data

Levi Strauss & Co. disclosed on Friday that suspected hackers gained unauthorized access to company files after compromising employees' computers, making the iconic American apparel maker the latest retailer to report a cybersecurity incident.

In a filing with the U.S. Securities and Exchange Commission, the denim company said an unauthorized third party accessed and exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack. The company did not specify what type of corporate data was taken.

Levi Strauss said it contained the breach shortly after discovering it, the incident did not disrupt business operations, and there was no evidence that consumer data had been affected.

"The company does not believe the incident has had, or is reasonably likely to have, a material impact on its business strategy, operations, financial condition, or results of operations," it said in the filing.

The company did not identify the attackers, disclose whether ransomware was involved, or say whether it had received a ransom demand. No hacking group has publicly claimed responsibility for the incident, and the investigation remains ongoing.

The San Francisco-based company is best known for its Levi's denim brand. It operates nearly 3,300 retail stores worldwide, employs approximately 19,000 people, and generated $6.3 billion in net revenue last year. It has a market capitalization of more than $9 billion.

The disclosure comes as retailers continue to face growing cyberthreats. Earlier this week, Dutch luxury department store chain De Bijenkorf said a cyberattack affecting one of its logistics providers delayed customer orders, returns, and refunds while potentially exposing customer information. 

Fast-fashion retailer Mango and outdoor clothing brand The North Face disclosed data breaches last year. British retailers Harrods, M&S and The Co-op also faced cybersecurity incidents in 2025.

The FBI and other authorities have continued to warn companies about the rise of social engineering campaigns by cybercriminals.