Loading story…
Nike said it is investigating a potential cybersecurity incident after the WorldLeaks extortion group claimed it accessed Nike systems and stole data. WorldLeaks added Nike to its Tor leak site and subsequently published what it described as ~1.4 TB of data (roughly 188k files), using the leak to pressure the company. Nike stated it is actively assessing the situation and emphasized consumer privacy and data security.
Reporting characterized WorldLeaks as an extortion-focused operation that shifted away from ransomware-style encryption to data theft and leak-based coercion, and noted it emerged after rebranding from Hunters International amid increased law-enforcement pressure. Separate from the Nike matter, Morphisec reported an unrelated eScan antivirus supply-chain compromise in which malicious updates were distributed via legitimate update infrastructure, deploying multi-stage malware and blocking remote remediation by tampering with the Windows hosts file and eScan registry settings; this incident requires manual vendor-assisted remediation for affected endpoints.
TTPs, infrastructure, and targeting history in one profile.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.