Story perspectives

Under Armour Faces Class-Action After 72M Records Breach

1/26/2026

Summary

Story summary

Under Armour is investigating a breach affecting about 72 million customer records linked to Everest ransomware group.
The breach occurred in November 2025 and exposed names, emails, birth dates, purchase histories.
Under Armour says payment systems and passwords remain secure, despite hackers' claims.
The company has not disclosed notification plans or whether a ransom demand was made.
Class-action lawsuits have been filed against Under Armour alleging negligence in data protection.

History

Historical Context

The 2013 Target data breach exposed 40 million credit and debit card accounts, revealing significant vulnerabilities in retail cybersecurity. Investigated by the U.S. Secret Service, this incident highlighted systemic issues in data protection, paralleling the 2020 cyberattack that affected numerous organizations. These breaches have prompted increased regulatory scrutiny and a push for stronger data protection laws to safeguard consumer information.

1 of 2

Story summary

Under Armour is investigating a breach affecting about 72 million customer records linked to Everest ransomware group.
The breach occurred in November 2025 and exposed names, emails, birth dates, purchase histories.
Under Armour says payment systems and passwords remain secure, despite hackers' claims.
The company has not disclosed notification plans or whether a ransom demand was made.
Class-action lawsuits have been filed against Under Armour alleging negligence in data protection.

1 / 2