Levi Strauss & Co. (the “Company”) recently detected that the Company experienced a cybersecurity incident in which an unauthorized third party gained access to Company files through social engineering techniques that enabled unauthorized access to three employees’ Company-issued computers. Following such detection, the Company initiated response protocols, implemented containment measures, launched an investigation, which remains ongoing and engaged the services of third-party cybersecurity experts.
Based on preliminary findings from the Company’s investigation, the Company believes that certain corporate information was accessed and exfiltrated as a result of the incident. As of the date of this filing, the Company believes that its rapid response efforts successfully contained and terminated the unauthorized access, and that no consumer data was impacted. The Company has not experienced any interruption in business operations as a result of the incident.
Based on information available as of the date of this filing, the Company does not believe the incident has had, or is reasonably likely to have, a material impact on the Company’s business strategy, operations, financial condition, or results of operations.
The Company has provided and will provide notifications to affected parties and applicable regulators as appropriate and in accordance with applicable law.
Source: https://www.sec.gov/Archives/edgar/data/94845/000199937126017264/levi-8k_080726.htm
