ConfirmedData breach

Under Armour: a data breach

In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom , alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly on a popular hacking forum , including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.

The record

Organisation
Under Armour
Identity
Under Armouridentified by its domain in a verified breach record
Records affected
72,742,892 records
Data exposed
Dates of birth, Email addresses, Genders, Geographic locations, Names, Purchases
Sector
Not recorded
Occurred
2025-11-17
Disclosed
2026-01-21
First recorded here
2026-09-09

Sources (1)

One source so far.

  1. Have I Been PwnedFirst reported

    2026-01-21