Under Armour Probes Breach of 72 Million Customer Records

Under Armour, the Baltimore-based sportswear giant, is investigating a data breach that exposed the personal information of approximately 72 million customers, according to cybersecurity notifications and online posts from hackers.

The incident, which occurred in November 2025, was first claimed by the Everest ransomware group on its dark web site. The hackers alleged they had stolen 343 gigabytes of data and attempted to extort the company, but negotiations broke down, leading to the public release of the records in January 2026 on a hacking forum. Breach notification service Have I Been Pwned analyzed the leaked dataset and confirmed it contained 72 million email addresses, along with names, genders, dates of birth, geographic locations based on ZIP codes, and purchase histories. The data also included email addresses of Under Armour employees. Samples shared with reporters matched these descriptions, showing detailed customer purchase records.

Under Armour acknowledged the claims in a statement, confirming it had engaged external cybersecurity experts to probe the matter. "We have no evidence to suggest this issue has affected UA.com or systems used to process payments or...