Nike, Inc. is a publicly traded (NYSE: NKE), Oregon-incorporated apparel and footwear company whose U.S. privacy policy discloses collecting physical characteristics (weight, height, body measurements) and fitness/activity data -- including from connected health repositories like Apple HealthKit -- through its Nike app, SNKRS, and Nike Run Club membership ecosystem. Nike's policy discloses using cookies, pixel tags, and SDKs for cross-site advertising, and its App Store privacy label confirms Identifiers and Usage Data are used to track users across apps and websites owned by other companies. Nike's own policy frames tailored-advertising disclosures as a CCPA "sale"/"sharing" while stating it does not sell data for money or compensation. Corporate ownership is traceable through routine SEC 10-K filings naming Converse Inc. as a formally disclosed subsidiary. A March 2026 class-action complaint alleges Nike discovered a data breach in January 2026, attributed by media reports to the Worldleaks/Hunters International group, in which roughly 1.4 terabytes of data were allegedly exfiltrated through a third-party-hosted portal -- an allegation, not a confirmed Nike disclosure or regulator finding.
TRACK RECORD
1 ENFORCEMENT ACTION
[2026-07-15]
Nike's own 10-K risk factors disclose that the company has experienced, and expects to continue experiencing, cyberattacks and unauthorized-access attempts against its systems; Nike states these attacks have not had a material impact on operations to date, but acknowledges they could result in litigation, regulatory inquiries, and reputational harm in the future.
Apple's App Store privacy label for the Nike app confirms a broad collection footprint linked to identity, including Purchase History, Contact Info, Search History, Browsing History, and Device/User Identifiers, corroborating the policy-level disclosures from an independent source.
Nike's U.S. privacy policy discloses collecting physical characteristics such as weight, height, and body measurements, and separately discloses collecting fitness and activity data -- including from connected device health repositories such as Apple HealthKit or Google Fit -- generated through use of the Nike Platform (including Nike Run Club).
Nike, Inc.'s SEC Exhibit 21 subsidiary filing lists 'Converse Inc.' as a Delaware entity among its formally disclosed subsidiaries, publicly confirming Converse as a registered Nike subsidiary.
Nike, Inc.'s SEC Form 10-K cover page identifies it as an Oregon corporation with a listed IRS Employer Identification Number, filed as part of its annual regulatory disclosures for fiscal year 2026.
Apple's App Store privacy label for the Nike app separately discloses a category of data 'linked to your identity' that is used for 'Third-Party Advertising' purposes, corroborating the ad-sharing practice described in Nike's own privacy policy from an independent source.
Nike's privacy policy states that its provision of tailored advertising services may itself be legally considered a 'sale' or 'sharing' of personal information for cross-context behavioral or targeted advertising under applicable privacy law, while separately stating Nike does not disclose, sell, or share personal information to third parties for money or compensation.
Nike's own 10-K risk factors disclose that the company has experienced, and expects to continue experiencing, cyberattacks and unauthorized-access attempts against its systems; Nike states these attacks have not had a material impact on operations to date, but acknowledges they could result in litigation, regulatory inquiries, and reputational harm in the future.
Apple's App Store privacy label for the Nike app discloses that data (Identifiers and Usage Data) may be used to track users across apps and websites owned by other companies.
Nike's privacy policy discloses using cookies, pixel tags, and similar technologies -- including some operated by third-party analytics and advertising companies -- to target advertising and content to users across Nike's own platform and third-party sites and services.