Quick Summary
Nike is investigating a potential data breach after the extortion group WorldLeaks claimed to have stolen 1.4TB of internal data, including 188,347 files. The leaked data appears to focus on design and manufacturing workflows rather than customer information. This incident highlights the cybersecurity risks faced by companies in the sportswear industry, as internal documents can be exploited without involving customer data.
The Securityish Brief
Nike is currently probing a possible data breach after the extortion group WorldLeaks claimed to have stolen 1.4TB of internal data. The group alleges that it has taken 188,347 files from Nike’s systems, with the leaked data including directories labeled “Women’s Sportswear,” “Men’s Sportswear,” and “Garment Making Process.” This suggests that the focus of the theft is on product development and manufacturing processes rather than customer databases.
Nike has confirmed that it is investigating the situation but has not validated the claims made by WorldLeaks. A spokesperson stated, “We always take consumer privacy and data security very seriously,” indicating the company’s commitment to addressing the issue. However, they did not disclose specifics about the stolen data or whether a ransom would be paid.
WorldLeaks is reportedly a rebrand of the Hunters International ransomware gang, which has been active since 2023. Rather than using ransomware tactics, they are now directly stealing data and threatening to leak it to exert pressure on victims. This shift in strategy reflects a growing trend among cybercriminals who are targeting internal documents from manufacturers and industrial firms.
In July 2025, WorldLeaks also targeted Dell, although the company claimed that no significant data was compromised. The recent claim against Nike comes shortly after Under Armour disclosed a breach involving the Everest ransomware gang, which exposed details of 72.7 million accounts.
The incident underscores the vulnerabilities faced by companies in the fashion and sportswear sectors, where complex global supply chains and constant design updates create opportunities for data theft. The loss of internal documents can lead to significant competitive disadvantages, even if customer data remains secure.
Key Takeaways
- Monitor your organization’s data security policies to ensure they are up to date and effective against potential breaches.
- Consider implementing stricter access controls to sensitive internal documents to minimize the risk of unauthorized access.
- Stay informed about the latest threats and tactics used by cybercriminals to better prepare your organization against data theft.
- Regularly review and update your incident response plan to ensure a swift reaction to potential data breaches.
- Educate employees about the importance of data security and the risks associated with internal document leaks.
Key Terms & Concepts
- WorldLeaks: In this article, WorldLeaks refers to an extortion group claiming to have stolen data from Nike.
- Hunters International: Hunters International is a ransomware gang that has reportedly rebranded as WorldLeaks.
- data breach: A data breach is an incident where unauthorized access to sensitive data occurs, potentially leading to data theft.
Read the original article here: https://go.theregister.com/feed/www.theregister.com/2026/01/26/data_thieves_claim_nike_data_haul/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
