Breach Database / Under Armour
Yes — Under Armour was breached.
- 72.7 million accounts affected
- Breach occurred 2025-11-17 · underarmour.com
- Verified entry in the Have I Been Pwned catalog
What happened
In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom, alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly on a popular hacking forum, including 72M email addresses. Many records also contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.
What data was exposed
- Dates of birth
- Email addresses
- Genders
- Geographic locations
- Names
- Purchases
What to do right now
- Expect convincing phishing emails. Attackers use breached details to write personalized emails. Be suspicious of any message referencing this service.
- Check your other accounts on Have I Been Pwned. Your email address may appear in other breaches you don't know about yet.
- Monitor the apps you use going forward. Clearly watches the breach record for the companies behind your apps and alerts you the moment one appears.
Breach data from Have I Been Pwned. Listing here means the service appears in the public breach record — not that your personal data was affected.