Nike: Exclusive: Athletics giant Nike actively investigating data breach claims

Nike Listed as Victim by World Leaks Ransomware Gang, Data Leak Threatened

Nike has been named as a victim by the World Leaks ransomware group, which claimed on its darknet leak site that it will publish stolen data within 48 hours. The announcement, posted on January 22, included no evidence of the breach or a ransom demand, though the post had already been viewed over 400 times at the time of reporting.

A Nike spokesperson confirmed awareness of the incident, stating the company is "investigating a potential cybersecurity incident" while emphasizing its commitment to consumer privacy and data security.

World Leaks, believed to be a rebrand of the Hunters International ransomware group, shifted its tactics in January 2025, abandoning encryption-based attacks in favor of data exfiltration-only extortion. Since its emergence, the group has claimed 116 victims, including Australian petroleum distributor Kel Campbell in June 2025.

Unlike its predecessor, World Leaks does not encrypt victim systems, relying instead on the threat of public data leaks to pressure targets. The group’s latest claim against Nike marks one of its highest-profile incidents to date.

Source: https://www.cyberdaily.au/security/13131-exclusive-athletics-giant-nike-actively-investigating-data-breach-claims

Nike cybersecurity rating report: https://www.rankiteo.com/company/nike

"id": "NIK1769145876",
"linkid": "nike",
"type": "Ransomware",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Apparel/Footwear',
                        'name': 'Nike',
                        'type': 'Corporation'}],
 'data_breach': {'data_exfiltration': True},
 'date_detected': '2025-01-22',
 'date_publicly_disclosed': '2025-01-22',
 'description': 'Nike has been named as a victim by the World Leaks ransomware '
                'group, which claimed on its darknet leak site that it will '
                'publish stolen data within 48 hours. The announcement '
                'included no evidence of the breach or a ransom demand.',
 'impact': {'data_compromised': True},
 'investigation_status': 'Ongoing',
 'motivation': 'Data exfiltration-only extortion',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'World Leaks'},
 'references': [{'date_accessed': '2025-01-22',
                 'source': 'Darknet leak site (World Leaks)'}],
 'response': {'communication_strategy': 'Nike spokesperson confirmed awareness '
                                        'of the incident and stated the '
                                        'company is investigating while '
                                        'emphasizing commitment to consumer '
                                        'privacy and data security.',
              'incident_response_plan_activated': True},
 'threat_actor': 'World Leaks (rebrand of Hunters International)',
 'title': 'Nike Listed as Victim by World Leaks Ransomware Gang, Data Leak '
          'Threatened',
 'type': 'Ransomware'}