Under Armour announced that it is investigating claims of a massive data breach after a cybercriminal posted millions of customer records to a hacker forum.
Under Armour spokesperson Matt Dornic told TechCrunch that the company is “aware of claims that an unauthorized third party obtained certain data.”
“Our investigation of this issue, with the assistance of external cybersecurity experts, is ongoing. Importantly, at this time, there’s no evidence to suggest this issue affected UA.com or systems used to process payments or store customer passwords,” the spokesperson added.
“What we know at this time is the number of affected customers with any sort of information that could be considered sensitive is a very small percentage,” said Dornic.
In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom, alleging they had obtained access to 343GB of data.
In January 2026, customer data from the incident was published publicly on a popular hacking forum, including 73 million e-mail addresses. Many records also reportedly contained additional personal information such as names, dates of birth, genders, geographic locations and purchase information.
Image courtesy Under Armour
