Published
July 6, 2026
If you shopped with Nike and got a breach notice this spring, this is the lawsuit behind it — and the core fight: the complaint says payment-card data was exposed, while Nike says only limited third-party data was accessed. Nothing to claim yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations, and the scope of exposed data is disputed. Nike, Inc. has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Nike is facing a proposed class action over a data breach that the lawsuit says exposed customer information and that Nike was slow to disclose. The case is captioned Gomez v. Nike, Inc. and was filed on March 24, 2026 in the U.S. District Court for the District of Oregon, where Nike is headquartered.According to the complaint, Nike discovered the incident around January 21, 2026 but did not notify affected customers until about February 25, 2026 — more than a month later. The lead plaintiff, a Los Angeles County resident, seeks to represent a class of affected Nike customers. Nike has not been found liable, and the claims remain unproven.
Status
Complaint Filed
Proposed class action · Gomez v. Nike, Inc. · D. Oregon · Filed March 24, 2026
Data Exposed (alleged)
Names, emails, billing addresses, phone, payment-card info
Nike says a third-party provider incident accessed limited data and that no full card details or credentials were taken; a ransomware group claimed ~1.4TB
Can I Claim?
No — nothing to claim yet
No settlement, no fund, no claim form at this stage
What the Lawsuit Alleges
The complaint alleges that Nike failed to implement reasonable and adequate data-security measures to protect the personal information customers entrusted to it, and that its handling of the incident amounts to negligence, breach of implied contract, and unjust enrichment. A central theme is timing: the suit alleges Nike learned of the breach around January 21, 2026 but waited until roughly February 25 to notify the people whose data was involved, leaving them exposed to fraud in the interim.On the scope of the data, the accounts differ. The complaint alleges the exposed information included names, email addresses, billing addresses, phone numbers, and payment-card information, and points to a ransomware group that claimed to have published about 1.4 terabytes of Nike data online. Nike, by contrast, has said the incident involved a third-party service provider and resulted in unauthorized access to limited consumer information, and that no full payment-card details or account credentials were accessed. Which characterization is correct is exactly the kind of factual dispute the litigation exists to resolve; for now, both the breach's full scope and Nike's liability are unproven.
Is There a Nike Settlement Yet?
No. This is a lawsuit, not a settlement.That means there is no settlement fund, no claim form, no payout, and no deadline to act — and customers do not need to do anything in the lawsuit at this stage. The filing of a complaint is the start of a case, not the end. Nike has not been found liable simply because a lawsuit was filed. If the case is ever resolved through a settlement, or a class is certified, a formal claims process with its own eligibility rules and deadlines would be announced separately.
What Nike Customers Can Do Now
• Watch for an official breach notice from Nike describing what was exposed for you.• Monitor the payment cards and accounts you used with Nike, and report unfamiliar charges to your bank.
• Be alert to phishing emails or texts referencing your Nike orders or account.
• Keep any breach notice in case a settlement or certified class later opens a claims process.
These steps are free and do not depend on the lawsuit. For breach settlements that are open and claimable now, see OCA's data breach settlements tracker.
Frequently Asked Questions
Is there a Nike data breach settlement yet?
No. Gomez v. Nike, Inc. is a proposed class action, not a settlement. There is no fund, no claim form, and no deadline. Nike has not been found liable.What information was exposed?
The complaint alleges names, emails, billing addresses, phone numbers, and payment-card information were exposed, and cites a ransomware group's claim of ~1.4TB of data. Nike says a third-party provider incident accessed limited data and that no full card details or credentials were taken. The scope is disputed.Do I need to file a claim?
No. Because this is a lawsuit and not a settlement, there is nothing to claim and no deadline. Monitor your cards and keep any breach notice. If a class is certified or a settlement is reached, a claims process and deadlines would be announced separately.Is this the same as the Nike tariff lawsuit?
No. This data-breach case is unrelated to consumer lawsuits over Nike pricing or tariffs — it concerns the security of customer data, not pricing.Sources
• Bloomberg Law — "Nike Hit With Suit Over January Data Breach Affecting Thousands": Bloomberg Law• The Fashion Law — "Nike Faces Suit Over Alleged Data Failures, Breach Disclosure": The Fashion Law
• U.S. District Court, District of Oregon — docket for Gomez v. Nike, Inc. (filed March 24, 2026), via CourtListener: CourtListener Docket Search
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more class actions keep scrolling below.
Status
Complaint Filed — Proposed Class Action
Case Title
Gomez v. Nike, Inc.
Court
U.S. District Court, District of Oregon
Date Filed
March 24, 2026
Breach Timeline
Discovered ~Jan 21, 2026 · notified ~Feb 25, 2026
Official Court Page
CourtListener Docket
