Under Armour confirms second major data breach
Under Armour has confirmed a significant data breach investigation in January 2026. The incident began in November 2025 when the Everest ransomware group claimed access to 343GB of internal company data, seemingly going unnoticed for several weeks. By January 2026, approximately 72.7 million unique email addresses were published on a public hacking forum.
The compromised data includes personal information such as customer names, birth dates, genders, locations, and purchase histories. Under Armour states that passwords, payment systems, and the main UA.com website were not affected.
Pattern of security failures
This marks the second major breach for Under Armour. In 2018, the company experienced a breach affecting 150 million MyFitnessPal user accounts. The recurrence of this issue clearly demonstrates that the company has not acted sufficiently to protect customer information.
Legal action and allegations
Following the previous breach, multiple class action lawsuits were filed in the United States, including Ganesh v. Under Armour Inc. in the US District Court for the District of Maryland. Plaintiffs allege negligence in protecting customer and employee information, breach of implied contract, and invasion of privacy. The lawsuits claim that Under Armour failed to provide timely notification and implement adequate cybersecurity safeguards.
Take Out
This second breach reinforces concerns that the company has not implemented sufficient security measures. Surely this undermines its defence in the original case, which was based on its claim that it had taken reasonable precautions. Clearly not.
Last Updated on 31 January 2026 by the5krunner
Reader-Powered Content
This content is not sponsored. It’s mostly me behind the labour of love, which is this site, and I appreciate everyone who supports it.
Support the site: Follow (free, fewer ads) · Subscribe (paid, ad-free) · Buy Me A Coffee ❤️
All articles are written by real people, fact-checked, and verified for originality. See the Editorial Policy. FTC: Affiliate Disclosure — some links pay commission. As an Amazon Associate, I earn from qualifying purchases.
tfk is the founder and author of the5krunner, an independent endurance sports technology publication. With 20 years of hands-on testing of GPS watches and wearables, and competing in triathlons at an international age-group level, tfk provides in-depth expert analysis of fitness technology for serious athletes and endurance sport competitors.
