The sportswear maker said it became aware of suspicious activity and has launched an internal review. In a brief statement, Nike emphasized that protecting consumer privacy and safeguarding data remain a priority, adding that it is actively assessing the scope and impact of the incident.
The ransomware group calling itself World Leaks said on its website that it had published roughly 1.4 terabytes of data allegedly taken from Nike’s systems. The group did not provide detailed evidence to support the claim, and the material could not be independently verified. Attempts to access the purported data or establish direct contact with the hackers were unsuccessful.
Nike declined to disclose further details about the investigation, including whether customer or partner information may have been compromised, or whether the company had received or paid any ransom demands.
Uncertainty also remains over whether the alleged breach may have affected information linked to Nike’s major wholesale partners, including Dick’s Sporting Goods, Macy’s and JD Sports. Dick’s and Macy’s did not immediately respond to requests for comment, while a spokesperson for JD Sports said the company had no immediate comment.
The development comes at a sensitive time for Nike, which has been working to regain momentum after losing market share to smaller and more agile rivals. The company’s shares were flat in late-morning trading on Monday.
Cyberattacks have increasingly disrupted large corporations in recent years, often resulting in significant financial and operational damage. High-profile incidents at companies such as MGM Resorts International, Clorox and UnitedHealth Group in 2023 and 2024 underscored the scale of the risk, with losses in some cases reaching hundreds of millions of dollars.