Under Armour
Disclosed Jan 21, 20268 months ago72,742,892 accountsUnverified
Under Armour customer records posted online, HIBP counts 72 million emails
A dataset tied to an Everest ransomware claim against Under Armour was posted online and Have I Been Pwned loaded about 72 million email addresses with names, birth dates, postcodes and purchase details. Under Armour said it was aware of the claims and that only a very small percentage of customers had sensitive data affected.
What is known
| People affected | 72,742,892 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 21, 2026 |
| Happened | Nov 17, 2025 |
| Attack | Ransomware |
| Data exposed | Dates of birth, Emails, Location, Names, Financial, Other |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Under Armourhaveibeenpwned.com · Aggregator | Aggregator |
| Under Armour says it's 'aware' of data breach claims after 72M customer records were posted onlinetechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jan 21 | 72,742,892 |
| Researchtotal | Jan 22 |
Other breaches at Under Armour
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 29, 2018Mar 29, 20188 years ago | Mar 29, 20188 years ago | Not stated | Tech | Confirmed | Unknown |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/UnderArmour to https://techcrunch.com/2026/01/22/under-armour-says-its-aware-of-data-breach-claims-after-72m-customer-records-were-posted-online/ · seed source
- 2026-09-25 · sector: tech to retail · seed source
- 2026-09-25 · data_types: ["dob","emails","location","names","financial"] to ["dob","emails","location","names","financial","other"] · seed source
- 2026-09-25 · summary: In November 2025, the Everest ransomware group claimed Under Armour as a victim and attempted to extort a ransom , alleging they had obtained access to 343GB of data. In January 2026, customer data from the incident was published publicly o to A dataset tied to an Everest ransomware claim against Under Armour was posted online and Have I Been Pwned loaded about 72 million email addresses with names, birth dates, postcodes and purchase details. Under Armour said it was aware of th · seed source
- 2026-09-25 · title: empty to Under Armour customer records posted online, HIBP counts 72 million emails · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.