Under Armour, the renowned sportswear and footwear company, is currently investigating a significant data breach that has compromised approximately 72 million customer records. The breach was first reported in November 2025 when the Everest ransomware group claimed responsibility, alleging they had exfiltrated 343GB of sensitive internal data from the company. (cybernews.com)
The stolen data includes personally identifiable information (PII) such as names, email addresses, dates of birth, genders, and approximate locations based on postcodes or ZIP codes. Additionally, the breach exposed purchase histories, which could be exploited for targeted phishing campaigns. (techcrunch.com)
The data was initially leaked on a dark web forum by the Everest group, and subsequently indexed by Have I Been Pwned (HIBP), a service that tracks data breaches. HIBP added the dataset to its database, notifying 72 million individuals that their information had been compromised. (techcrunch.com)
Under Armour has acknowledged the breach, stating they are "aware" of the claims and are investigating the matter. However, the company has not provided further details or confirmed the full extent of the breach. (techcrunch.com)
In response to the breach, a class-action lawsuit was filed on behalf of affected customers, alleging negligence in data protection. The lawsuit references the large-scale exfiltration of sensitive information during the November 2025 ransomware attack. (malwarebytes.com)
The Everest ransomware group has a history of targeting high-profile organizations, including Collins Aerospace, BMW, and the Brazilian government. Their tactics often involve double extortion, where they threaten to release stolen data unless a ransom is paid. (theregister.com)
Customers are advised to monitor their accounts for any suspicious activity and to be cautious of phishing attempts that may exploit the leaked information. Implementing strong, unique passwords and enabling two-factor authentication where possible can help enhance security.
Under Armour Data Breach Exposes Millions of Customer Records:
- Under Armour says it's 'aware' of data breach claims after 72M customer records were posted online | TechCrunch, Published on Thursday, January 22
- Under Armour ransomware breach: data of 72 million customers appears on the dark web | Malwarebytes, Published on Thursday, January 22
- 72.7M Under Armour accounts hit in alleged ransomware leak • The Register