LmCast :: Stay tuned in

Nike investigates data breach after extortion gang leaks files

Recorded: Jan. 27, 2026, 6 p.m.

Original Summarized

Nike investigates data breach after extortion gang leaks files

News

Featured
Latest

New ClickFix attacks abuse Windows App-V scripts to push malware

Microsoft patches actively exploited Office zero-day vulnerability

Nearly 800,000 Telnet servers exposed to remote attacks

Cloudflare misconfiguration behind recent BGP route leak

OpenAI's ChatGPT ad costs are on par with live NFL broadcasts

Fortinet blocks exploited FortiCloud SSO zero day until patch is ready

Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor

WinRAR path traversal flaw still exploited by numerous hackers

Tutorials

Latest
Popular

How to access the Dark Web using the Tor Browser

How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11

How to use the Windows Registry Editor

How to backup and restore the Windows Registry

How to start Windows in Safe Mode

How to remove a Trojan, Virus, Worm, or other Malware

How to show hidden files in Windows 7

How to see hidden files in Windows

Webinars
Downloads

Latest
Most Downloaded

Qualys BrowserCheck

STOPDecrypter

AuroraDecrypter

FilesLockerDecrypter

AdwCleaner

ComboFix

RKill

Junkware Removal Tool

Deals

Categories

eLearning

IT Certification Courses

Gear + Gadgets

Security

VPNs

Popular

Best VPNs

How to change IP address

Access the dark web safely

Best VPN for YouTube

Forums
More

Virus Removal Guides
Startup Database
Uninstall Database
Glossary
Send us a Tip!
Welcome Guide

HomeNewsSecurityNike investigates data breach after extortion gang leaks files

Nike investigates data breach after extortion gang leaks files

By Sergiu Gatlan

January 27, 2026
11:45 AM
0

Nike is investigating what it described as a "potential cyber security incident" after the World Leaks ransomware gang leaked 1.4 TB of files allegedly stolen from the sportswear giant.
"We always take consumer privacy and data security very seriously," the company told BleepingComputer in an email statement. "We are investigating a potential cyber security incident and are actively assessing the situation."
This comes after the extortion group added Nike to its dark web data-leak site, claiming it stole nearly 190,000 files containing corporate data providing information on Nike's business operations.

Before this article was published, World Leaks removed the Nike entry from its leak, suggesting that it may be negotiating with the company or that Nike has already paid a ransom to have the allegedly stolen documents removed.
However, Nike has yet to confirm the extortion gang's claims of data theft, and BleepingComputer couldn't independently verify whether the leaked files contained legitimate data.

Nike's entry on World Leaks' leak website (BleepingComputer)
​World Leaks is believed to be a rebrand of the Hunters International ransomware, following a switch from file encryption to data theft and extortion-only attacks in January 2025, citing concerns that ransomware operations were becoming too risky and were no longer profitable.
Hunters International emerged in late 2023 and was itself flagged as a possible Hive ransomware rebrand due to code similarities, after claiming responsibility for over 280 attacks.
The list of victims includes the U.S. Marshals Service, the Indian multinational tech giant Tata Technologies, the Japanese optics giant Hoya, the North American automobile dealership AutoCanada, and the U.S. Navy contractor Austal USA.
Since it surfaced, World Leaks has also published data stolen from dozens of organizations worldwide on its data leak site.
In July, World Leaks affiliates were linked to the breach of one of Dell's product demonstration platforms and to the exploitation of end-of-life SonicWall SMA 100 devices to install custom OVERSTEP rootkit malware on compromised systems.

The 2026 CISO Budget Benchmark
It's budget season! Over 300 CISOs and security leaders have shared how they're planning, spending, and prioritizing for the year ahead. This report compiles their insights, allowing readers to benchmark strategies, identify emerging trends, and compare their priorities as they head into 2026.
Learn how top leaders are turning investment into measurable impact.
Download Now

Related Articles:
Askul confirms theft of 740k customer records in ransomware attackHave I Been Pwned: SoundCloud data breach impacts 29.8 million accountsHacker admits to leaking stolen Supreme Court data on InstagramSpanish energy giant Endesa discloses data breach affecting customersUS broadband provider Brightspeed investigates breach claims

Data Breach
Data Leak
Extortion
Nike
Security Incident
World Leaks

Sergiu Gatlan
Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email or Twitter DMs for tips.

Previous Article
Next Article

Post a Comment Community Rules

You need to login in order to post a comment
Not a member yet? Register Now

You may also like:

Popular Stories

Microsoft patches actively exploited Office zero-day vulnerability

Microsoft investigates Windows 11 boot failures after January updates

Microsoft releases emergency OOB update to fix Outlook freezes

Sponsor Posts

Discover how phishing kits are sold and deployed. Download the full research report.

Overdue a password health-check? Audit your Active Directory for free

Exposure Management Index: Insights From 3,000+ Teams. Get The Report.

Is your data already on a leak site? Monitor your exposure threats for free.

Get a free shadow AI inventory today

  Upcoming Webinar

Follow us:

Main Sections

News
Webinars
VPN Buyer Guides
SysAdmin Software Guides
Downloads
Virus Removal Guides
Tutorials
Startup Database
Uninstall Database
Glossary

Community

Forums
Forum Rules
Chat

Useful Resources

Welcome Guide
Sitemap

Company

About BleepingComputer
Contact Us
Send us a Tip!
Advertising
Write for BleepingComputer
Social & Feeds
Changelog

Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure

Copyright @ 2003 - 2026 Bleeping Computer® LLC - All Rights Reserved

Login

Username

Password

Remember Me

Sign in anonymously

Sign in with Twitter

Not a member yet? Register Now


Reporter

Help us understand the problem. What is going on with this comment?

Spam

Abusive or Harmful

Inappropriate content

Strong language

Other

Read our posting guidelinese to learn what content is prohibited.

Submitting...
SUBMIT

Nike is currently investigating a potential cybersecurity incident following the public disclosure of approximately 1.4 terabytes of data allegedly stolen by the extortion group, World Leaks. This incident, detailed on World Leaks’ dark web data-leak site, involves claims of the theft of nearly 190,000 files containing corporate data pertaining to Nike’s business operations. The emergence of this situation coincides with World Leaks’ rebranding from the previously known Hunters International ransomware group. This shift occurred in January 2025, motivated by concerns regarding the increased risk and diminishing profitability associated with traditional ransomware operations, transitioning instead to a data theft and extortion-only model.

The origins of World Leaks are linked to Hunters International, which surfaced in late 2023 and was initially flagged due to code similarities, potentially indicating a rebrand of the Hive ransomware group. Evidence of World Leaks’ activities includes involvement in breaches targeting organizations such as the U.S. Marshals Service, Tata Technologies, Hoya, AutoCanada, and Austal USA, along with attacks against Dell’s product demonstration platforms and the exploitation of vulnerable SonicWall SMA 100 devices. The group has published stolen data from numerous organizations globally.

Following the initial disclosure, World Leaks removed Nike’s listing from its data-leak site, suggesting ongoing negotiations with Nike or a prior payment to have the alleged stolen data removed. It is currently unclear whether the information attributed to theft is legitimate or fabricated. BleepingComputer, in its reporting, was unable to independently verify the data’s authenticity. The cybersecurity incident underscores the evolving tactics of extortion groups, moving away from ransomware operations to target corporate data for financial gain. The investigation is ongoing as Nike assesses the scope of the alleged breach and takes steps to mitigate any potential damage. The company’s response highlights the increasing importance of robust data security measures and proactive threat monitoring in the current cybersecurity landscape.