Matt Hull, VP of Cyber Intelligence and Response at NCC Group said:
“What’s notable about the Nike data breach isn’t just that a global brand may have been compromised - which is becoming familiar - but what was allegedly taken by WorldLeaks. The apparent focus on R&D, manufacturing and employee data underscores how supply chain vulnerabilities have become a primary target for cyber criminals. Access to this type of information gives criminals leverage beyond customer data, exposing how products are designed, built and shipped across complex ecosystems.
“The possible exposure of operational and supply chain data raises broad concerns about resilience, visibility and third-party risk management. Global brands increasingly rely on vast ecosystems and supplier networks, and because of this, attackers are exploiting their weakest points. The potential Nike breach reinforces the need for supply chain security to be treated as a core business risk. Our recent research revealed that 68% of organisations expect the severity and scale of attacks on supply chains to rise, so it’s vital that they receive the same level of scrutiny, investment and accountability as internal operations.”