Was It Breached Secria

Recent breaches

Under Armour data breach: the 72 million email leak, and what the company says

Have I Been Pwned counts 72,742,892 email addresses in customer data posted in January 2026. Under Armour calls claims that sensitive data was compromised unfounded.1,2

Have I Been Pwned, added 21 January 2026

72,742,892

email addresses in the leaked data, a count of addresses, not people.1

  • Names, dates of birth and genders
  • Geographic locations
  • Purchases

Under Armour, to the Associated Press, 22 January 2026

"Any implication that sensitive personal information of tens of millions of customers has been compromised is unfounded."

It also said it had no evidence the issue affected UA.com or the systems that process payments or store customer passwords.2

Both accounts side by side, each in its own words. Checked 28 October 2026 against the sources.

What's on record

Unlike the other breaches on this site, there's no breach notice to compare against. A listing here isn't a finding that the company was at fault.

The claim
Have I Been Pwned says the Everest ransomware group claimed Under Armour as a victim in November 2025 and tried to extort a ransom, and that customer data from the incident was posted on a hacking forum in January 2026.1
What the leak holds
Email addresses, names, dates of birth, genders, geographic locations and purchases, per Have I Been Pwned's analysis of the file.1
What Under Armour says
No evidence the issue affected UA.com or its payment or password systems, and claims about sensitive personal information of tens of millions of customers are unfounded.2
Breach notices
We found no Under Armour filing on California's or Texas's breach lists as of 28 October 2026.3,4
Lawsuits
Bloomberg Government reported on 15 December 2025 that a Texas customer had filed a proposed class action against Under Armour in federal court in Maryland. That's a claim, not a finding. We found no settlement as of 28 October 2026.5

A claim, a leak, a denial

The dates come from Have I Been Pwned, the Associated Press and Bloomberg Government.

  1. The Everest group claims Under Armour and demands a ransom.1

  2. A proposed class action is reported in Maryland.5

  3. Have I Been Pwned adds the leaked data: 72,742,892 addresses.1

  4. Under Armour tells the AP the sensitive data claims are unfounded.2

What to do if your email is in it

The leak, as Have I Been Pwned describes it, holds contact and shopping details, not Social Security or card numbers.1

  1. Expect convincing order and delivery emails.Don't click links in unexpected messages, even if they name a company you use. Check orders by going to the site yourself.6
  2. Reused your Under Armour password? Change it there and everywhere else.Under Armour says password systems weren't affected, but IdentityTheft.gov's advice for any login is to change reused passwords too, and consider two-factor sign-in.2,6
  3. Check your email address yourself.Have I Been Pwned, a separate service, lists this leak and lets you search an email address against it.1

Questions people ask

Did Under Armour have a data breach?

Have I Been Pwned lists the leak as verified.1 Under Armour disputes that sensitive personal information of tens of millions of customers was compromised, and we found no breach notice from it.2,3,4

Is there an Under Armour data breach settlement?

We found none as of 28 October 2026. A proposed class action was reported in December 2025.5 A real settlement comes with a court-approved notice that names the case. This isn't legal advice.

Do I need a credit freeze?

Not for this data alone. IdentityTheft.gov ties the credit freeze to a leaked Social Security number, and that isn't among the data Have I Been Pwned lists here.1,6

Sources 6
  1. Under Armour breach entry (added 21 January 2026), Have I Been Pwned. Read 28 October 2026.
  2. Under Armour looking into data breach affecting customers' email addresses (22 January 2026), The Associated Press, via WIS-TV. Read 28 October 2026.
  3. Search data security breaches, California Department of Justice, Office of the Attorney General. Searched for Under Armour. Read 28 October 2026.
  4. Data Security Breach Reports, Office of the Texas Attorney General. Searched for Under Armour. Read 28 October 2026.
  5. Under Armour sued after ransomware group reports data breach (15 December 2025), Bloomberg Government. Read 28 October 2026.
  6. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 28 October 2026.

Every count names its record and the day we read it. How we check