2026 Nike — forum sale claim (unverified); 40+ GB customer CSV alleged
Data compromised
Actor-claimed 40+ GB uncompressed CSV files with customer names, emails, contact information, order details, transaction-related data, and other PII from 2026 registrations—no public sample verification at catalog time
Technical writeup
Unverified forum/marketplace claim — indexed July 8, 2026. A threat actor advertised on a criminal forum purported Nike customer datasets described as 40+ gigabytes of uncompressed CSV files containing 2026 customer registration and order information, including names, emails, contact data, order lines, and transaction-related fields. This listing is separate from the January 2026 WorldLeaks ~1.4 TB internal-document extortion wave that Nike was already investigating. Trade press (The Record, BleepingComputer) documented Nike's ongoing assessment but had not independently verified customer CSV samples tied to this July forum post at catalog time. BreachHistory labels the claim unverified and uses recordsAffected 0 until a company or regulator cites a victim count.
Root cause
Unverified criminal-forum post advertising alleged Nike customer registration and order CSV datasets from 2026—distinct from January WorldLeaks internal archive; Nike had not confirmed at catalog time