Levi Strauss & Co.
bd_c9110f3671bb06de · schema v1 · pii pii-v1
Full breach record for Levi Strauss & Co. →4 incidents on fileLevi Strauss & Co. notified the NH Attorney General of a credential stuffing attack detected on June 13, 2024. Attackers used valid credentials from a third-party breach to access 123 NH residents' accounts on levi.com. LS&Co deactivated compromised accounts and forced password resets. Exposed data likely included basic PII; no payment data was compromised.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 13, 2024
Discovered
Jun 21, 2024
Filed
vs. sector median
6 wks faster
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Oregon State AGbd_3b1eebcb107db0ad2024-06-21Verified
- Washington State AGbd_af1f821586c29af72024-06-21Verified
- Indiana State AGbd_bef76f3f16d22f202024-06-21Verified
- California State AGbd_da3a3e26c0353b712024-06-21Verified
Show 3 more filings ↓Show fewer ↑up to 1d gap
- Maine State AGbd_7e8e7bdd4378db662024-06-22 · +1dVerified
- Montana State AGbd_ba58543d29f427532024-06-20 · +1dCandidate
- Vermont State AGbd_d5e768930b4a70602024-06-20 · +1dVerified
Filing propagation · 8 filings · 8 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.