Levi Strauss & Co.

Levi Strauss & Co. detected a credential stuffing attack on June 13, 2024, where bad actors used compromised credentials from other sources to attempt access to Levi.com accounts. The company issued forced password resets and deactivated affected credentials. Affected data included name, email, addresses, order history, and partial payment card information (last 4 digits, type, expiration). No fraudulent purchases were detected.