Nike Investigating Data Breach Following WorldLeaks Ransomware Group Claim

Nike is investigating an alleged data breach after the extortion group WorldLeaks posted on its darknet leak site on 22 January 2026 claiming to have exfiltrated over 1.4 TB of internal data — including approximately 481,183 user accounts, employee records, and third-party credentials — and threatening public release if ransom demands are not met. The report contextualizes WorldLeaks as an extortion-only group with prior victims, describes likely initial access vectors (compromised legitimate websites, phishing with malicious attachments, unpatched internet-facing applications, and VPNs lacking MFA), and recommends enforcing multi-factor authentication and assessing exposure.