Under Armour

Disclosed Jan 21, 202672,742,892 accountsUnverified

Under Armour customer records posted online, HIBP counts 72 million emails

A dataset tied to an Everest ransomware claim against Under Armour was posted online and Have I Been Pwned loaded about 72 million email addresses with names, birth dates, postcodes and purchase details. Under Armour said it was aware of the claims and that only a very small percentage of customers had sensitive data affected.

What is known

People affected	72,742,892 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Jan 21, 2026
Happened	Nov 17, 2025
Attack	Ransomware
Data exposed	Dates of birthEmailsLocationNamesFinancialOther
Sector	Retail · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Under Armour

Newstechcrunch.com

Under Armour says it's 'aware' of data breach claims after 72M customer records were posted online

Notices filed

Accounts in the dataJan 21

Have I Been Pwned72,742,892 people

TotalJan 22

ResearchCount not stated

Other breaches at Under Armour

Breach, details not statedExposed names, emails, passwords and addresses. Reported to the California AG.TechUSMar 29, 2018

History of this record

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/UnderArmour to https://techcrunch.com/2026/01/22/under-armour-says-its-aware-of-data-breach-claims-after-72m-customer-records-were-posted-online/by seedSource

sector2026-09-25

tech to retailby seedSource

data_types2026-09-25

["dob","emails","location","names","financial"] to ["dob","emails","location","names","financial","other"]by seedSource

summary2026-09-25

In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom , alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly o to A dataset tied to an Everest ransomware claim against Under Armour was posted online and Have I Been Pwned loaded about 72 million email addresses with names, birth dates, postcodes and purchase details. Under Armour said it was aware of thby seedSource

title2026-09-25

empty to Under Armour customer records posted online, HIBP counts 72 million emailsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Under Armour