Nike Hit with Class Action Lawsuit Over Data Breach

A new federal lawsuit alleges that athletic apparel giant Nike failed to protect the sensitive personal and financial data of its customers. The Nike data breach lawsuit claims the company discovered a security breach but waited more than a month to notify those affected, leaving their information exposed and increasing the risk of fraud and identity theft.

Details of the Lawsuit

Filed in California, the lawsuit is seeking class-action status, which would allow it to represent a larger group of affected Nike customers. The core of the complaint is that Nike allegedly failed to implement “adequate and reasonable” security measures to safeguard customer information, such as encrypting sensitive data.

A key point in the legal filing is the delay in communication. The lawsuit accuses Nike of waiting too long to inform customers that their data had been compromised, preventing them from taking immediate steps to protect themselves. Nike has declined to comment on the pending litigation.

Breach Timeline and Data Exposed

According to the lawsuit, the timeline of the incident raises significant concerns for consumers:

• Nike reportedly discovered the data breach around January 21.
• The company did not begin notifying affected customers until February 25, more than 30 days later.

During this period, sensitive Nike customer data was exposed, including a combination of personal and financial details that could be valuable to criminals. The compromised information allegedly includes:

• Full names
• Email addresses
• Billing addresses
• Phone numbers
• Payment card information

While it’s unclear if this breach is connected to a ransomware attack that reportedly targeted Nike in January, the exposure of payment details is a serious concern for anyone who made a purchase with the company.

Risks and Damages Sought

The lawsuit argues that the exposure of this data places victims at an "imminent risk" of data breach identity theft. When criminals have access to names, addresses, and payment card numbers, they can attempt to make fraudulent purchases or open new accounts in a victim's name.

Because of this ongoing risk, the lawsuit is seeking significant compensation for victims. It demands a minimum of $5 million in damages and calls for Nike to provide lifetime credit monitoring services for all affected class members to help them detect and respond to potential fraud.

What Customers Should Do Next

The lawsuit is currently awaiting a decision on its class-action status, which will determine how the case proceeds. In the meantime, if you are a Nike customer concerned about the Nike data breach 2024, it's crucial to be proactive.

• Monitor your financial accounts. Carefully review your credit card and bank statements for any transactions you don’t recognize. Report suspicious activity to your financial institution immediately.
• Check your credit reports. You are entitled to free credit reports from the major bureaus. Check them for any accounts or inquiries you did not authorize.
• Be wary of phishing attempts. Scammers may use your leaked information to create convincing emails or text messages. Be cautious about clicking on links or providing personal information.

Customers who believe they were affected by this breach and are interested in legal recourse can research their options, including contacting data breach law firms to learn more about how to potentially join the Nike data breach lawsuit.