Under Armour security incident history
Hacking, data breaches and other security incidents involving Under Armour, with related coverage.
About 72 million Under Armour customer email addresses and other data exposed
Impact: About 72 million email addresses and some customers’ personal information; 541,773 email addresses belonging to users in South Korea, along with 36 names and 36 gender entries
Data containing about 72 million Under Armour customer email addresses, along with some names, genders, dates of birth and other information, was published online. The Everest ransomware group claimed to have stolen the data in November 2025, and Under Armour said in January 2026 that it was investigating. The company said there was no evidence that customer passwords or payment systems had been affected. In March 2026, it was confirmed that 541,773 email addresses belonging to users in South Korea, along with 36 names and 36 gender entries, had been exposed, and that the attacker had used a compromised valid employee account to gain unauthorized access to a secure FTP server.
Related reports: 19 · last report →