Nike sued after data breach allegedly put customer PII at risk of identity theft

Nike class action lawsuit overview:

• Who: Plaintiff Maria Gomez filed a class action lawsuit against Nike Inc.
• Why: Gomez alleges Nike failed to safeguard customer data in a January 2026 data breach.
• Where: The Nike data breach class action lawsuit was filed in Oregon federal court.

A new class action lawsuit accuses Nike of failing to properly secure and safeguard consumers’ personally identifiable information (PII) during a January 2026 data breach.

Plaintiff Maria Gomez’s class action lawsuit alleges Nike failed to properly secure and safeguard consumers’ PII stored within its information network, including names, email addresses, billing addresses, phone numbers, transaction information and payment card details.

Gomez wants to represent a nationwide class of individuals whose private information was compromised as a result of the Nike data breach.

“With this action, Representative Plaintiff seeks to hold Defendant responsible for the harms it caused and will continue to cause Representative Plaintiff and other similarly situated persons in the massive and preventable cyberattack purportedly discovered by Defendant on January 21, 2026,” the Nike class action lawsuit says.

Gomez argues the Nike data breach was the result of cybercriminals infiltrating Nike’s “inadequately protected network” and accessing private information stored there.

Nike failed to inform of data breach for more than a month, class action alleges

The Nike class action lawsuit claims that the company did not begin informing victims of the data breach until Feb. 25, 2026, more than a month after the company claims to have discovered it. According to media reports, a ransomware group published 1.4 terabytes of Nike data on its website.

“Indeed, Representative Plaintiff and Class Members were wholly unaware of the data breach until they received letters from Defendant informing them of it,” the Nike class action says.

Gomez claims Nike intentionally, willfully, recklessly and/or negligently failed to take and implement adequate and reasonable measures to ensure that consumers’ private information was safeguarded.

“Plaintiff and all class members are now imminently at risk of crippling future identity theft and fraud,” the Nike class action lawsuit says.

Gomez claims Nike is guilty of negligence and breach of implied contract and that the company was unjustly enriched. The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of actual and punitive damages for herself and all class members.

In another Nike lawsuit, a Washington consumer claims Nike sent promotional emails with misleading subject lines to trick people into thinking they must act quickly to take advantage of discounts.

What do you think of the claims made in this Nike data breach class action lawsuit? Let us know in the comments.

The plaintiff is represented by Mark J. Hilliard of The Law Offices of Mark J. Hilliard and A. Brooke Murphy of Murphy Law Firm.

The Nike data breach class action lawsuit is Gomez v. Nike Inc., Case No. 6:26-cv-00564-AP, in the U.S. District Court for the District of Oregon.

Read About More Class Action Lawsuits & Class Action Settlements:

• Insulet announces recall of Omnipod 5 Pods due to insulin delivery issue
• Toyota recalls 144,000 Lexus vehicles over rearview camera defect
• CVS class action alleges kickbacks for drug formulary access
• JCPenney skincare tool sparks class action over facial scan privacy concerns