Nike Hit With Class Action Lawsuit Over January 2026 Data Breach

Nike is facing a class action lawsuit over a data breach that allegedly exposed customers' personal information earlier this year.

A ransomware group called WorldLeaks claimed in late January 2026 that it had stolen 1.4 terabytes of data from Nike's systems. The group posted the data on its leak site after Nike allegedly failed to pay a ransom. The breach was reportedly discovered by Nike on January 21, 2026, but the company didn't start notifying affected customers until February 25 — more than a month later.

The class action lawsuit was filed on March 24, 2026, in U.S. District Court for the District of Oregon by plaintiff Maria Gomez. According to the complaint, the data that was allegedly compromised includes names, email addresses, billing addresses, phone numbers, transaction information, and payment card details.

The lawsuit alleges that Nike failed to implement adequate security measures to protect customer data and then waited too long to tell people about it. Gomez and other affected customers say they had no idea their information had been compromised until Nike's notification letters arrived weeks after the breach.

Nike has said that no full payment card details or account credentials were exposed. However, the lawsuit argues that the information that was compromised still puts customers at serious risk of identity theft and fraud.

There's no settlement yet in this case. It's still in the early stages of litigation, and Nike has not publicly commented on the lawsuit.

Who's Affected

If you've ever shopped on Nike.com or through Nike's app and provided personal information like your name, email, phone number, billing address, or payment details, you may have been affected by this breach. Nike sent notification letters to impacted customers starting February 25, 2026. If you received one, your data was likely part of the breach.

What You Can Do Right Now

If you think your information may have been compromised, keep an eye on your bank statements and credit reports. Consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion). Change your Nike account password and any other accounts where you used the same login info.

Download ClassyAction to stay updated on this lawsuit and get notified when the payout drops.