Under Armour confirms second major data breach
Under Armour has confirmed a significant data breach investigation in January 2026. The incident began in November 2025 when the Everest ransomware group claimed access to 343GB of internal company data, seemingly going unnoticed for several weeks. By January 2026, approximately 72.7 million unique email addresses were published on a public hacking forum.
The compromised data includes personal information such as customer names, birth dates, genders, locations, and purchase histories. Under Armour states that passwords, payment systems, and the main UA.com website were not affected.
Pattern of security failures
This marks the second major breach for Under Armour. In 2018, the company experienced a breach affecting 150 million MyFitnessPal user accounts. The recurrence of this issue clearly demonstrates that the company has not acted sufficiently to protect customer information.
Legal action and allegations
Following the previous breach, multiple class action lawsuits were filed in the United States, including Ganesh v. Under Armour Inc. in the US District Court for the District of Maryland. Plaintiffs allege negligence in protecting customer and employee information, breach of implied contract, and invasion of privacy. The lawsuits claim that Under Armour failed to provide timely notification and implement adequate cybersecurity safeguards.
Take Out
This second breach reinforces concerns that the company has not implemented sufficient security measures. Surely this undermines its defence in the original case, which was based on its claim that it had taken reasonable precautions. Clearly not.
Last Updated on 31 January 2026 by the5krunner
My favourite kit and nutrition
- Injinji – Runners protect your toes. Avoid discomfort and minor injury. Run more. Run faster. I use them.
- Garmin 90-degree charging adapter — The small adapter that keeps your charging cables tidy. Essential for race day. I use one.
- Garmin charging puck — the fastest and most reliable way to top up your Garmin before a session. I use one.
- Ravemen FR300 — Front light that mounts directly under your Garmin or Wahoo head unit. Keeps your bars clean and your beam pointed where it matters. I use one.
- Body Glide – The blue anti-chafe stick that all swimmers and many runners use. I use it.
- Maurten — The race nutrition trusted by elite athletes. Gels and drink mixes engineered to be easy on the stomach. I use them.
- Garmin Varia RTL515 — A radar rear light that alerts you to vehicles approaching from behind. Pairs with your Edge or Garmin watch. I use this model.
- Favero Assioma Pro RS2 — The power-meter pedals most serious cyclists choose. Accurate, easy to move between bikes. I use this model.
- Garmin Forerunner 970 — A serious choice for a pro-grade triathlon watch. I use this.
- Polar H10 — My daily driver for accurate, waking HRV readings.
- Wahoo ELEMNT Roam 3 — The bike computer that has the feature Garmin lacks: usability. I use mine on most rides.
Reader-Powered Content
This content is not sponsored. It’s mostly me behind the labour of love, which is this site, and I appreciate everyone who supports it.
Support the site: Follow (free, fewer ads) · Subscribe (paid, ad-free) · Buy Me A Coffee ❤️
All articles are written by real people, fact-checked, and verified for originality. See the Editorial Policy. FTC: Affiliate Disclosure — some links pay commission. As an Amazon Associate, I earn from qualifying purchases.
tfk is the founder and author of the5krunner, an independent endurance sports technology publication. With 20 years of hands-on testing of GPS watches and wearables, and competing in triathlons at an international age-group level, tfk provides in-depth expert analysis of fitness technology for serious athletes and endurance sport competitors. ID
