Under Armour data breach

In November 2025, sportswear brand Under Armour suffered a major cyberattack claimed by the Everest ransomware group. In January 2026, the stolen dataset—comprising roughly 343 GB of data and 72.7 million unique customer email addresses (along with over 191 million total records)—was published publicly on underground hacking and dark web forums.

What Data Was Exposed?

• Compromised Information: Full names, email addresses, dates of birth, genders, geographic locations, and purchase or item-browsing histories.

• Unaffected Systems: Under Armour stated there is no evidence that passwords, customer account login credentials, or payment/credit card processing systems were compromised.

• Historical Context: This follows Under Armour’s earlier, separate 2018 MyFitnessPal data breach, which affected roughly 150 million users

In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:

1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.

2. Be on the lookout for an increase in spam or fraudulent emails.

3. Change your password used in the affected website, but also any other website where you may have re-used the password.

4. Install Google or Microsoft's Authenticator app on your mobile device and activate 2FA authentication on any online service you use and which allow for this.