Levi Strauss says an intruder talked its way onto three employees' company laptops and took corporate files, and it filed the disclosure in the voluntary slot

Three laptops.

That is the whole of the entry point Levi Strauss described to the Securities and Exchange Commission on Friday morning. An unauthorised third party used social engineering techniques to reach three employees' company-issued computers, the company said, and through them gained access to company files. The filing went in at 06:04, under Item 8.01, with no exhibit and no press release attached.

What the company says it knows

Detection came first, then response protocols, containment measures, an investigation and outside cybersecurity experts. On preliminary findings, Levi Strauss believes certain corporate information was accessed and exfiltrated. It believes its response contained and terminated the access. It believes no consumer data was affected, and it says operations were never interrupted.

The investigation, by the company's own account, remains ongoing.

The item number is part of the disclosure

Form 8-K has a slot built for this. Item 1.05 is where a company reports a cybersecurity incident it has determined to be material. This filing is not there. It is under Item 8.01, Other Events, which is the voluntary route, and the copy explains why in a single sentence: based on information available as of the filing date, the company does not believe the incident has had, or is reasonably likely to have, a material impact on its business strategy, operations, financial condition or results of operations.

That is a judgment, made while the investigation is still running, and the filing labels it as one.

What is not in it

No date for the incident. No date for detection. No description of what was taken beyond the words corporate information, no count of files, no attacker, no group, no country, and no mention of any demand. The company says it has provided and will provide notifications to affected parties and applicable regulators as appropriate.

David Jedrzejek, the general counsel, signed it.