nike.com Domain Breach Exposure Report

The telemetry indicates a significant exposure event for nike.com, with over 3.1 million total events recorded between July 2025 and June 2026. The majority of these events, approximately 85%, are classified as historical data breaches, affecting over 2.6 million clients. Additionally, nearly 468,000 events are attributed to active infostealer logs, impacting both clients and employees. The primary malware families observed are LummaC2, Rhadamanthys, and Redline, all known for credential harvesting. The targeted services include account creation and login endpoints, suggesting a focus on account takeover or credential stuffing attacks. The data originates predominantly from the United States, Brazil, and Mexico. Given the high volume of historical data breaches and active infostealer activity targeting client and employee accounts, this exposure presents a critical risk. The prevalence of infostealers and credential-harvesting malware, coupled with the targeting of authentication services, indicates a high likelihood of account compromise and potential for further downstream impacts such as financial fraud or identity theft. Prioritization should focus on immediate remediation of identified vulnerabilities, enhanced credential security measures, and comprehensive monitoring for signs of account takeover and data exfiltration.