Nike Inc.
Nike Accused of Botching Data Breach Response for Shoppers
A proposed class action claims Nike failed to secure customer data before a January 2026 cyberattack and waited too long to warn shoppers whose personal information was exposed.
Key facts
- Claim deadline
- No deadline listed
- Potential payment
- Payment varies
- Proof listed
- No proof requirement listed
- Status
- Upcoming
Plain-language overview
Who may qualify?
Eligibility depends on the dates, products, locations, and other terms listed for this claim. Review any criteria below and the official terms before deciding whether it may apply to you.
- Individuals whose private information (including at least names, email addresses, billing addresses, phone numbers, transaction information, and/or payment card details) was compromised in the January 2026 Nike data breach.
- Members of a proposed California subclass consisting of California residents whose private information was compromised in the same January 2026 Nike data breach and whose claims may also arise under California privacy laws.
Case overview
What this settlement is about
A new proposed nationwide class action, filed by plaintiff Maria Gomez in the U.S. District Court for the District of Oregon, claims Nike left its network inadequately protected ahead of a January 2026 cyberattack. According to the lawsuit, hackers accessed roughly 1.4 terabytes of data, exposing customers' personally identifiable information — including names, email addresses, billing addresses, phone numbers, transaction details, and payment card information. The suit alleges Nike not only failed to implement reasonable cybersecurity safeguards but also delayed notifying affected shoppers until February 25, 2026, a delay plaintiffs say heightened their risk of identity theft and fraud.
