ConfirmedData breach
Under Armour: a data breach
In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom , alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly on a popular hacking forum , including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.
The record
- Organisation
- Under Armour →
- Identity
- Under Armouridentified by its domain in a verified breach record
- Records affected
- 72,742,892 records
- Data exposed
- Dates of birth, Email addresses, Genders, Geographic locations, Names, Purchases
- Sector
- Not recorded
- Occurred
- 2025-11-17
- Disclosed
- 2026-01-21
- First recorded here
- 2026-09-09
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-01-21