Nike Cyberattack by WorldLeaks
A ransomware group calling itself WorldLeaks has allegedly claimed responsibility for a cyberattack on global sportswear giant Nike and says it plans to publish stolen data this Saturday at 6 p.m.
The claim reportedly appeared on the group’s leak site, where they usually list victims and announce upcoming data releases.
At this stage, there is no public technical report confirming the intrusion, and Nike has not yet issued a detailed statement on the incident.
The exact type and size of the stolen data remain unknown, but WorldLeaks suggests that it has exfiltrated a large volume of internal information.
Based on earlier operations attributed to WorldLeaks, security analysts believe the group often steals very large data sets, sometimes reaching several terabytes. In past cases, such groups typically gain access through:
Once inside a network, ransomware gangs usually move laterally, collect sensitive files, compress them, and upload them to their own servers before issuing extortion demands.
Even if file encryption is not confirmed, data theft alone can be enough to pressure victims.
While the exact contents are unclear, the types of data that could be involved include:
If such information is published, the impact could be serious for employees, customers, suppliers, and business partners, leading to targeted phishing, fraud attempts, and loss of confidentiality for sensitive projects or contracts.
If WorldLeaks follows through on its promise to publish the data on Saturday, incident responders and threat intelligence teams will likely start analyzing the leak to understand its scope, confirm authenticity, and assess the risk to individuals and organizations connected to Nike.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…