Nike Alleged Breach: Threat Actors Claim Customer Records Leaked on Dark Web Forum

A threat actor operating under the alias “Nocturne” has posted a database listing on a dark web forum claiming to have exfiltrated customer data from Nike and confidential records from ophthalmology company Alcon, though neither company has confirmed the incident. According to DarkWebInformer, Nike, valued at $64 billion, was allegedly breached in June 2026, with […] The post Nike Alleged Breach: Threat Actors Claim Customer Records Leaked on Dark Web Forum appeared first on Cyber Security News.

A threat actor operating under the alias “Nocturne” has posted a database listing on a dark web forum claiming to have exfiltrated customer data from Nike and confidential records from ophthalmology company Alcon, though neither company has confirmed the incident. According to DarkWebInformer, Nike, valued at $64 billion, was allegedly breached in June 2026, with the actor claiming millions of lines of customer data were exfiltrated, an amount they estimate to be in the eight figures. The listing states the data covers recent customer registrations and order records exclusively from 2026, with no information predating that year. Nike Alleged Breach The actor claims the dataset is packaged as a 7z archive containing only CSV files, with the uncompressed size exceeding 40GB, and shared a sample screenshot as proof. Nike + Alcon Alleged Breach (Source: DarkWebInformer) This is not the first time Nike has been named in a major data-leak claim this year. In January 2026, the WorldLeaks ransomware gang claimed responsibility for stealing roughly 1.4 TB of internal Nike data, including nearly 190,000 files related to design, manufacturing, and factory operations. That earlier incident reportedly involved insider access rather than customer records, and Nike has not publicly confirmed a breach involving consumer data. For Alcon, a pharmaceutical and medical device manufacturer valued at $10 billion, the actor claims the breach occurred in May 2026 and includes a wider variety of data types. The alleged dataset reportedly contains user sign-up information for Alcon’s “MARLO” platform, including full names, addresses, and phone numbers, as well as Salesforce supplier data, internal MARLO conversation logs, order numbers, and source code for internal files. A sample CSV shared in the post includes fields such as customer hierarchy IDs, account groups, credit limits, SAP IDs, and geographic classification data. Notably, the actor claims Alcon had initially engaged in negotiations and reportedly received data samples before allegedly reversing course on a deal, prompting the actor to proceed with the public leak. The post includes a direct message to Alcon, criticizing the company for failing to disclose a breach to its customers. Both claims remain unverified at this time, and neither Nike nor Alcon has issued a public statement confirming unauthorized access to customer or supplier systems. Given the scale described, combined uncompressed files exceeding 40GB, security teams monitoring both organizations’ data exposure should treat the claims as credible enough to warrant proactive monitoring while awaiting official confirmation. Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google. The post Nike Alleged Breach: Threat Actors Claim Customer Records Leaked on Dark Web Forum appeared first on Cyber Security News.