Nike Investigates Alleged Data Theft and Extortion by WorldLeaks

Nike said it is investigating a potential cybersecurity incident after the WorldLeaks extortion group claimed it accessed Nike systems and stole data. WorldLeaks added Nike to its Tor leak site and subsequently published what it described as ~1.4 TB of data (roughly 188k files), using the leak to pressure the company. Nike stated it is actively assessing the situation and emphasized consumer privacy and data security.

Reporting characterized WorldLeaks as an extortion-focused operation that shifted away from ransomware-style encryption to data theft and leak-based coercion, and noted it emerged after rebranding from Hunters International amid increased law-enforcement pressure. Separate from the Nike matter, Morphisec reported an unrelated eScan antivirus supply-chain compromise in which malicious updates were distributed via legitimate update infrastructure, deploying multi-stage malware and blocking remote remediation by tampering with the Windows hosts file and eScan registry settings; this incident requires manual vendor-assisted remediation for affected endpoints.