1.4 Terabytes and 72 Million Customers Later
What actually happened after the Nike and Under Armour ransomware attacks... and what it means for fakes, fans, and your personal data.
I realize this isn’t what you usually find in the newsletter. But one of my biggest frustrations with sneaker media is the lack of follow-up when new information becomes available. A story breaks, everyone covers it, and then... nothing. So today I want to revisit something I wrote a few weeks ago about Nike and Under Armour’s data breaches, because the clock hit zero and there’s a lot more to talk about.
WorldLeaks’ countdown clock expired on January 24th and, as promised, attackers released the data. What they dropped was approximately 1.4 terabytes of internal Nike data, nearly 189,000 files, with filenames pointing toward design and manufacturing workflows rather than customer databases. Directories labeled “Women’s Sportswear,” “Men’s Sportswear,” “Training Resource – Factory,” and “Garment Making Process.”
Nike’s statement still hasn’t moved much. A spokesperson told multiple outlets: “We always take consumer privacy and data security very seriously. We are investigating a potential cybersecurity incident and are actively assessing the situation.” No confirmed scope, no customer notification plan, no timeline of when the intrusion started.
Based on analysis reported by The Register, the leaked data does not appear to include customer personal information such as names, addresses, payment details, or Social Security numbers. So if you were worried about your Nike.com account, that doesn’t seem to be what this is about.
But I think there’s a more interesting and relevant to all of us aspect to this that we should be talking about, because this is where my two decades in the industry mean something...
When I was at StockX, authentication was the whole game. We were obsessed with identifying counterfeit product because the entire business model depended on trust. I’ve held fake Jordans, fake Yeezys, fake Supreme collabs... shoes so convincing that only someone who had touched thousands of pairs could catch them. The counterfeit market is massive, sophisticated, and always hungry for better source material.
The leaked data appears to cover the period from 2020 through 2026, meaning counterfeiters could start producing fake Nike products without even waiting for their release.
Let that sit for a second.
We’re not talking about counterfeiters reverse-engineering a shoe after it drops. We’re potentially talking about factories getting access to tech packs, materials specs, colorway details, and production timelines before the shoes even exist in the market. The leaked documents reportedly contain audit results, partner data, production workflows, and validation reports... a detailed look at internal operations that are rarely visible outside the company.
To me that signals a counterfeiting problem that could take years to fully surface. And most consumers will never know.
