Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible Fanatics (global sports commerce platform) data breach. According to dark web monitoring sources, a hacker group calling itself N0n claimed responsibility for a cyberattack on Fanatics (global sports commerce platform) in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, Fanatics (global sports commerce platform) has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About Fanatics (global sports commerce platform)
Fanatics, Inc. is an American sports platform founded by Michael Rubin in Jacksonville, Florida, in 2011. The company is headquartered in New York City and operates official online stores for dozens of professional sports teams and leagues, including the NFL, NBA, MLB, NHL, NCAA, and international leagues. Its divisions span licensed sports merchandise, trading cards and collectibles, sports betting and gaming, live events, and live commerce. Fanatics serves over 100 million fans worldwide, employs more than 22,000 people, and holds partnerships with over 900 sports properties.
What Happened?
On September 20th, 2026, Fanatics was listed as a claimed victim on the dark web leak site of a ransomware group called N0n, as reported by Ransomware.live, RedPacket Security, and SOCRadar. The posting is an attacker-side allegation that has not been independently verified, and Fanatics has not publicly confirmed any ransomware incident. No regulatory filing, victim disclosure, or independent journalist reporting confirming a breach was found.
The N0n group’s leak-site post claims destructive control over Fanatics’ cloud data estate and states that deletion has begun. The claim alleges the following data was accessed: 46,902 order files (108 GB) said to contain customer personal data; accounts-payable invoices of league and brand partners; customer balances; a bank transaction archive; customer tax exemption certificates; and a fraud-prevention data set. All of these are attacker allegations only and must not be treated as confirmed. The posting set a deadline of September 23rd, 2026 at 01:01 UTC, and no ransom amount was stated. Ransomware.live itself describes N0n as an emerging group and advises that the claim should be treated with caution until independently verified. SOCRadar reports that N0n was first observed in September 2026, has claimed 11 victims across multiple sectors, and carries a zero lethality score with no known sophistication rating. No class action litigation connected to this specific incident has been identified. Fanatics does have a prior history of unconfirmed breach allegations from late 2025, including a claim that a threat actor was selling customer data on an open-web marketplace and a separate claim of a 2.6-million-record database sale, neither of which was publicly confirmed by the company.
Key Facts at a Glance
- Company or Organization: Fanatics (global sports commerce platform)
- Industry: Retail & E-Commerce; Sports Merchandise; Licensed Consumer Products; Sports Betting & Gaming
- Location: New York City, NY (headquarters); Jacksonville, FL (major operational hub)
- Incident type: Ransomware leak-site allegation (unverified attacker claim)
- Date claim first observed: September 20th, 2026
- Prior breach: Unconfirmed allegations from late 2025 involving claimed sales of customer data; neither incident was publicly confirmed by Fanatics
- Litigation status: No litigation found connected to this specific incident; Fanatics has faced unrelated class action suits involving sportsbook deposit practices, trading card antitrust claims, and merchandise fees
- Source: Ransomware.live – Fanatics / N0n claim; RedPacket Security – N0n Ransomware Victim: Fanatics; SOCRadar – N0n Ransomware Group Profile; BotCrawl – Fanatics Data Breach Allegation (Nov 2025); BrinzTech – Alleged Fanatics Database Sale; ClassAction.org – Fanatics Litigation News
What Should You Do?
Even though this incident has not been confirmed, it is reasonable to take protective steps if you have a Fanatics account or have made purchases on the platform. Consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Monitor your financial accounts closely for unfamiliar charges and review your credit reports for free at AnnualCreditReport.com. If you notice signs of identity theft or fraud, report them and get a recovery plan at IdentityTheft.gov. Stay alert to phishing emails or calls that reference your Fanatics account, and consider changing your account password and enabling two-factor authentication as a precaution.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
