Under Armour is investigating a data breach after 72M customer records were posted online by a cybercriminal.
Under Armour is an American company that designs, manufactures, and sells sportswear, athletic shoes, and fitness-related accessories.
TechCrunch reported that Under Armour is investigating a data breach after 72M customer records were posted online. The stolen data, linked to a November breach claimed by the Everest ransomware gang, was later confirmed by Have I Been Pwned, which notif…
Under Armour is investigating a data breach after 72M customer records were posted online by a cybercriminal.
Under Armour is an American company that designs, manufactures, and sells sportswear, athletic shoes, and fitness-related accessories.
TechCrunch reported that Under Armour is investigating a data breach after 72M customer records were posted online. The stolen data, linked to a November breach claimed by the Everest ransomware gang, was later confirmed by Have I Been Pwned, which notified affected individuals.
“In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom, alleging they had obtained access to 343GB of data.” reported Have I Been Pwned. “In January 2026, customer data from the incident was published publicly on a popular hacking forum, including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.”
🚨DATA BREACH– Under Armour (underarmour[.]com)
In November 2025, the Everest ransomware group claimed responsibility for a massive cyberattack on Under Armour, exfiltrating ~343 GB of sensitive data. After Under Armour reportedly failed to pay the ransom within the 7-day… pic.twitter.com/bJj6Hc6wSW
— JustaBreach (@justabreach) January 18, 2026
Compromised data includes customers’ dates of birth, email addresses, genders, geographic locations, names, and purchases.
The seller shared a sample of the stolen data with TechCrunch, the data set includes millions of Under Armour customer purchase records and employee email addresses, matching Have I Been Pwned’s report.
Under Armour confirmed it is investigating claims of a data breach with the help of external cybersecurity experts. The company says payment systems and passwords were not affected, only a very small percentage of customers may have had sensitive information exposed, and denies that tens of millions of sensitive records were compromised.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs** – hacking, data breach)**