Nike Allegedly Breached by WorldLeaks Ransomware Group in Major Cyberattack - cyberpress.org

Nike Allegedly Breached by WorldLeaks Ransomware Group in Major Cyberattack By AnuPriya January 23, 2026 Categories: Cyber AttackCyber Security NewsCybersecurity Global sportswear manufacturer Nike faces an alleged cyberattack from WorldLeaks, a ransomware group that has publicly claimed responsibility for the breach on its leak site. According to the group’s announcement, stolen data is scheduled for release this Saturday at 6 p.m., marking an escalation in what security researchers characterize as an increasingly aggressive extortion campaign targeting enterprise organizations. Attack Claims and Initial Response The WorldLeaks ransomware group posted the claim on its operational leak site, where it typically announces victims and schedules data releases to pressure organizations into ransom payment. 🚨🔴 ALERTE | 🇺🇸 NIKE PIRATÉE : REVENDICATION DU GROUPE RANSOMWARE WORLDLEAKS – PUBLICATION DE DONNÉES ANNONCÉE SAMEDI À 18H ⤵️ LE GROUPE DE RANSOMWARE WORLDLEAKS A REVENDIQUÉ UNE ATTAQUE CONTRE NIKE ET A ANNONCÉ LA PUBLICATION DE DONNÉES ISSUES DE CE PIRATAGE. À CE STADE, LA… PIC.TWITTER.COM/ZXRLT5VBR1 — Seb (@seblatombe) January 22, 2026 As of the current date, Nike has not issued a detailed public statement confirming the intrusion, nor has independent technical verification been published by security researchers or incident response firms. The exact scope and composition of exfiltrated data remain unconfirmed, though WorldLeaks claims to have obtained a substantial volume of internal Nike information. Based on historical analysis of WikiLeaks operations, security analysts estimate the stolen dataset could range from several hundred gigabytes to multiple terabytes of sensitive material. Ransomware groups employing WikiLeaks’ operational model typically gain initial network access through one of three primary vectors: compromised VPN credentials, exploited vulnerabilities in internet-facing applications, or spear-phishing campaigns targeting employees and business partners. Once inside the perimeter, threat actors execute lateral movement to identify and exfiltrate high-value data before deploying encryption payloads. The exfiltration phase typically involves data aggregation, compression, and upload to attacker-controlled servers. This approach allows criminals to maintain extortion leverage independent of encryption success. Data theft alone provides sufficient pressure for ransom demands. While specific contents remain unclear, typical datasets harvested in enterprise breaches of this scale include internal corporate documentation, strategic business files, employee personal information, customer contact databases, supplier and partner communications, commercial contracts, and human resources records containing employee sensitive data. If WikiLeaks publishes the threatened data, the consequences could extend across multiple stakeholder groups. Exposed employee records may enable targeted phishing and identity fraud. Customer and partner information could facilitate social engineering attacks and supply chain compromises. Disclosure of strategic documents may harm competitive positioning and reveal sensitive business operations. Threat intelligence teams and incident responders will likely begin analyzing any published data to validate authenticity, quantify breach scope, and assess downstream risk to connected individuals and organizations. Organizations with business relationships to Nike should prepare for potential notification and prepare contingency incident response protocols. Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google. Share Facebook Twitter Pinterest WhatsApp AnuPriya Any Priya is a cybersecurity reporter at Cyber Press, specializing in cyber attacks, dark web monitoring, data breaches, vulnerabilities, and malware. She delivers in-depth analysis on emerging threats and digital security trends. Recent Articles Threat Actors Leverage Copyright-Themed Emails to Drop PureLog Stealer Cyber Security News March 21, 2026 Google Chrome Update Fixes 26 Security Flaws, Including RCE Vulnerabilities Cyber Security News March 20, 2026 Critical UNISOC T612 Modem Flaw Enables RCE via Cellular Calls Cyber Security News March 20, 2026 Fake Tools Fuel Vibe-Coded Malware Campaign Targeting Unsuspecting Users cryptocurrency March 20, 2026 Cobra DocGuard Hijacked By Speagle Malware For Sensitive Data Theft APT March 20, 2026 Related Stories Cyber Security News Threat Actors Leverage Copyright-Themed Emails to Drop PureLog Stealer Divya - March 21, 2026 Cyber Security News Google Chrome Update Fixes 26 Security Flaws, Including RCE Vulnerabilities AnuPriya - March 20, 2026 Cyber Security News Critical UNISOC T612 Modem Flaw Enables RCE via Cellular Calls AnuPriya - March 20, 2026 cryptocurrency Fake Tools Fuel Vibe-Coded Malware Campaign Targeting Unsuspecting Users Varshini - March 20, 2026 APT Cobra DocGuard Hijacked By Speagle Malware For Sensitive Data Theft Varshini - March 20, 2026 Cyber Security News ScreenConnect Deployed via SILENTCONNECT Using VBScript and PEB Masquerading Varshini - March 20, 2026 LEAVE A REPLY Comment: Name:* Email:* Website: