Under Armour in Legal Trouble: Confirms second major data breach

Under Armour confirms second major data breach

Under Armour has confirmed a significant data breach investigation in January 2026. The incident began in November 2025 when the Everest ransomware group claimed access to 343GB of internal company data, seemingly going unnoticed for several weeks. By January 2026, approximately 72.7 million unique email addresses were published on a public hacking forum.

The compromised data includes personal information such as customer names, birth dates, genders, locations, and purchase histories. Under Armour states that passwords, payment systems, and the main UA.com website were not affected.

Under Armour American football players on field representing brand digital security and corporate trust

Pattern of security failures

This marks the second major breach for Under Armour. In 2018, the company experienced a breach affecting 150 million MyFitnessPal user accounts. The recurrence of this issue clearly demonstrates that the company has not acted sufficiently to protect customer information.

Legal action and allegations

Following the previous breach, multiple class action lawsuits were filed in the United States, including Ganesh v. Under Armour Inc. in the US District Court for the District of Maryland. Plaintiffs allege negligence in protecting customer and employee information, breach of implied contract, and invasion of privacy. The lawsuits claim that Under Armour failed to provide timely notification and implement adequate cybersecurity safeguards.

Take Out

This second breach reinforces concerns that the company has not implemented sufficient security measures. Surely this undermines its defence in the original case, which was based on its claim that it had taken reasonable precautions. Clearly not.

Last Updated on 3 October 2026 by tfk the5krunner


Small things I always use

Watches and sensors

On the bike

Home and indoor training

  • NPE Runn: Makes my basic treadmill smart, sending more accurate speed and distance to my watch and Zwift. I use it.
  • Google Wifi: Keeps Zwift connected in my pain cave. I use it.
  • Apple TV 4K: Zwift on the big screen. I use two.
  • Google Nest Doorbell (wired, 2nd gen): My video doorbell, running in both Google Home and Apple Home. I use it.

Health, recovery and sleep



Reader-Powered Content

Buy me a coffee

This content is not sponsored. It’s mostly me behind the labour of love, which is this site, and I appreciate everyone who supports it.

Support the site: Follow (free, fewer ads) · Subscribe (paid, ad-free) · Buy Me A Coffee

Written by real people, with AI assistance. Fact-checked and verified for originality. See the Editorial Policy. FTC: Affiliate Disclosure — some links pay commission. As an Amazon Associate, I earn from qualifying purchases.

Leave a Reply

Your email address will not be published. Required fields are marked *