Core Insights - Under Armour is investigating claims of a data breach after millions of customer records were posted on a hacker forum [1][2] - The breach was reportedly linked to the Everest ransomware gang, which claimed responsibility for the incident [1] - The breach notification site Have I Been Pwned informed 72 million individuals that their information had been compromised [2] Data Compromised - The stolen dataset includes names, email addresses, genders, dates of birth, and approximate locations based on postcode or ZIP code, as well as purchase information [2] - A sample of the stolen data provided to TechCrunch matches the types of data reported by Have I Been Pwned, including email addresses of Under Armour employees [3] Company Response - Under Armour's spokesperson stated that the company is aware of the claims and is conducting an ongoing investigation with external cybersecurity experts [3] - The spokesperson emphasized that there is currently no evidence suggesting that UA.com or systems used for payment processing or storing customer passwords were affected [3] Customer Impact - The spokesperson indicated that the number of affected customers with sensitive information is a very small percentage, but did not specify what constitutes "sensitive" information [4] - Under Armour has not confirmed whether it will notify customers whose information was compromised or if it has received any ransom demands from the hackers [5]
Under Armour says it's ‘aware' of data breach claims after 72M customer records were posted online