Nike Hit With Suit Over January Data Breach Affecting Thousands

A California woman sued Nike Inc. for allegedly failing to protect customer data in a cyberattack discovered in January 2026, claiming the company violated federal laws by not maintaining adequate security measures.

Lead plaintiff Maria Gomez filed the proposed class action Tuesday in the US District Court for the District of Oregon. The complaint alleges Nike breached its duties under common law, contract law, industry standards, and the Federal Trade Commission Act to implement reasonable and adequate data security measures.

Nike discovered unauthorized access to a third-party portal on January 21, but didn’t notify customers until a month later, the ...