Nike Internal Data Breach

In February 2026, a threat actor claimed access to Nike's internal systems and exfiltrated approximately 1.4 TB of data. The stolen information reportedly included internal documents, employee data, and other corporate assets. Nike acknowledged investigating the incident but provided limited public details on the scope or perpetrator.

Nike is one of the world's largest apparel and footwear companies with extensive digital operations, supply chain systems, and valuable intellectual property.

Exact initial access vector not publicly confirmed. Likely involved compromised credentials or supply-chain weaknesses common in large retail organizations.

Unknown threat actor focused on high-value corporate targets.

Attribution sources

• BleepingComputer
• Media reports

Countries affected

• Global

Data types

• Internal Documents
• Corporate Data
• Potentially Employee PII

Reputational risk and potential intellectual property exposure.

Public reaction

Moderate concern over potential leaks of proprietary information.

Ongoing investigation.

Security improvements

• Enhanced internal access controls and monitoring.

Significance

High-volume theft of internal data from one of the world's most valuable consumer brands.

Legacy

Added to growing trend of large corporations facing terabyte-scale internal data exfiltration.

Publishing organisations

• BleepingComputer
• Tech media outlets

Nike conducted an internal investigation; full outcome not publicly detailed.

Official documents

• Nike security statement (limited)

References

1. [1]Media coverage of the claim