Under Armour data breach
Was I affected?
Under Armour was reported to have a breach affecting about 72.7 million email addresses, exposing names, email addresses, dates of birth and addresses. You may be in the leaked file if you shopped online or had an account with Under Armour or its apps; check your email on Have I Been Pwned.
| Announced | Jan 22, 2026 |
|---|---|
| When it happened | November 2025 |
| Email addresses exposed | 72.7 million |
| Data exposed | Names, Email addresses, Dates of birth, Addresses and Other details |
| Status | Reported by the press; not confirmed by the company |
What happened
The Everest ransomware group claimed Under Armour in November 2025 and in January 2026 a customer data set was posted on a hacking forum; Have I Been Pwned counted about 72.7 million unique emails, many with names, birth dates, gender, location and purchase details. Under Armour said it was investigating, found no evidence that UA.com, payment systems or stored passwords were affected, and called claims that tens of millions of customers had sensitive data stolen unfounded.
What should I do?
- Treat emails, texts and calls that mention Under Armour orders or rewards as suspect; don't click links or share codes, and contact the company through its official app or website.
- Change your Under Armour password and any other account that uses the same password, and turn on two-step verification.
- Watch for scams that use your birth date or purchase history to sound legitimate.
Check whether your email address is in this breach on Have I Been Pwned (breach data from haveibeenpwned.com, CC BY 4.0).
Check the other services you use →
Sources
- Under Armour ransomware breach: data of 72 million customers appears on the dark web · Malwarebytes (news)
- Under Armour looking into data breach affecting customers' personal information · WFSB (Gray News) (news)