Nike data breach claim (January 2026): what WorldLeaks claims and what Nike said
In January 2026 the WorldLeaks extortion group listed Nike and published files it said came from Nike. This is a claim: Nike said it was investigating and had not confirmed the files.
Short answer
Was Nike hacked?
Not confirmed. WorldLeaks listed Nike on 22 January 2026 and published about 1.4 TB of files on 24 January, reportedly design and product-development material. Nike said it was investigating a potential cybersecurity incident and has not confirmed the files are genuine.
Reporting found no evidence of personal data in the published files.
Timeline at a glance
22–24 Jan 2026WorldLeaks lists Nike and publishes ~1.4 TB of alleged files. (Dark Reading)Unverified claim
Jan 2026Nike says it is investigating a potential incident. (Reuters)Reported
Last updated October 31, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Nike’s security posture at the time
What Nike publicly said about its security certifications and controls, how big it is, and how its shares moved, each tied to a source. A certificate covers a stated scope at a point in time; it is not a guarantee about every system. Reviewed 31 October 2026. Compare all 2026 breaches.
Security certifications publicly held
No public certification found.
No public certification found on the company’s own security, trust or compliance pages, in filings, or in the certificate registries searched (BSI, CSA STAR). That is a data point, not proof that none exists.
No reliable report of a share-price move around the disclosure was found.
Nike incident timeline, in detail
Confirmed = acknowledged by Nike, a regulator filing or a court. Reported = credible reporting Nike has not fully confirmed. Unverified claim = an attacker or leak-site claim.
22–24 Jan 2026Unverified claimExtortion claim
WorldLeaks claims and publishes alleged Nike design files
What happened. The WorldLeaks extortion group listed Nike on 22 January and published about 1.4 TB of files on 24 January, reportedly design and product-development material. Nike said it was investigating a potential cybersecurity incident and has not confirmed the files are genuine.
Impact. Unconfirmed; reporting found no personal data in the files. People or records affected: Not disclosed. Reporting found no evidence of personal data in the published files.
We found no SOC 2 or ISO 27001 certification published by Nike. That does not prove it had none; it means none was public.
A claim is not a confirmation
This entry rests on an attacker or leak-site claim the company has not confirmed. Leak sites exaggerate, recycle old data and list victims to pressure them. Treat it as a reason to ask questions, not as an established breach.
What it means for Nike Nike suppliers, partners and customers — and what to do
What Nike’s customers, partners and security teams can do now, based only on what has been disclosed.
1.Ask in writing, then wait for evidence
Ask the company whether it is aware of the claim and whether any system holding your data is in scope. Do not act on leak-site screenshots alone.
2.Prepare, without assuming
Check what data of yours the company holds so you can move fast if the claim is confirmed.
Not confirmed. WorldLeaks listed Nike on 22 January 2026 and published about 1.4 TB of files on 24 January, reportedly design and product-development material. Nike said it was investigating a potential cybersecurity incident and has not confirmed the files are genuine.
Did Nike have SOC 2 or ISO 27001 certification?+
We found no SOC 2 or ISO 27001 certification published by Nike. That does not prove it had none; it means none was public.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Nike. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.
🎉 New here? Use code WELCOME10 for 10% off any plan at checkout