Nike is probing a possible cyber incident after a hacking group reported publishing a substantial volume of data related to the company's operations.
In a public statement, Nike said, "We always take consumer privacy and data security very seriously," and added, "We are investigating a potential cyber security incident and are actively assessing the situation." The company did not provide further details about the scope of the inquiry.
The group that posted the material identifies itself as the ransomware collective World Leaks and said on its website that it had released 1.4 terabytes of data linked to Nike. Attempts to download the published files were not immediately successful, and the claim could not be independently verified.
Nike declined to answer questions about the specifics of its probe or to say whether any ransom negotiation or payment took place.
The announcement comes as Nike faces a broader business challenge - the company has been working to regain its position as the leading global sportswear brand amid competition from smaller rivals. Nike's shares were reported as flat in late morning trading on Monday.
It was not immediately clear whether the alleged data release involved information held by any of Nike's large wholesale partners. Retailers named in reports as potential partners of concern include Dick's, Macy's, and JD Sports. Representatives for Dick's and Macy's did not respond to requests for comment, and a spokesperson for JD Sports had no immediate comment.
High-profile data breaches have inflicted significant disruption on companies in recent years and have imposed substantial costs. The report cited examples of major attacks on firms across different industries, noting that MGM Resorts International, Clorox, and UnitedHealth Group all experienced major incidents in 2023 and 2024. The MGM breach reportedly cost that company at least $100 million in damages, and Clorox saw a drop of more than $350 million in quarterly net sales after its incident.
At this stage, the details around the World Leaks claim and the extent of any impact on Nike or its partners remain uncertain. Investigators and company officials are continuing to assess available information while stakeholders await clarification on whether the posted data is authentic and whether sensitive consumer or commercial information was exposed.
Key developments:
- Nike has announced an investigation into a potential cybersecurity incident after a group claimed to publish 1.4 terabytes of data.
- Attempts to access the data were not immediately successful and the claim could not be independently verified.
- Uncertainty remains about whether wholesale partners such as Dick's, Macy's, or JD Sports were affected; those retailers did not provide immediate comment.