Under Armour Addresses Data Breach Claims: 72M Customer Records Exposed Online
The sportswear company Under Armour is currently investigating allegations of a significant data breach. Recent claims indicate that a cybercriminal has posted approximately 72 million customer records on an online hacking forum. This incident reportedly originated from a breach that occurred in November, which has been linked to the Everest ransomware gang.
Details of the Data Breach
The breach became prominent following a notification from Have I Been Pwned, a breach notification service. This service alerted 72 million individuals via email that their personal information had been compromised.
Contents of the Stolen Data
- Names
- Email addresses
- Genders
- Dates of birth
- Approximate location data (based on postcode or ZIP code)
- Purchase information
The cybercriminal provided a sample of the stolen data to TechCrunch, which showed records of Under Armour customers’ purchases. It also included numerous email addresses associated with Under Armour employees.
Under Armour’s Response
Under Armour’s spokesperson, Matt Dornic, confirmed the company’s awareness of unauthorized data access. He stated that the investigation is ongoing, with assistance from external cybersecurity experts. Importantly, Dornic emphasized that there is currently no evidence suggesting that UA.com or systems responsible for processing payments or storing customer passwords were affected.
Affected Customer Information
Dornic mentioned that the number of customers whose sensitive information may have been impacted is only a small fraction of the total. However, he declined to specify what Under Armour considers as “sensitive” data.
Next Steps and Customer Notification
At this time, Under Armour has not disclosed whether it plans to inform the affected individuals. Additionally, there has been no statement regarding any potential communication from the hackers, such as ransom demands. The company aims to address these claims responsibly as investigations progress.
This data breach highlights the ongoing challenges businesses face in safeguarding customer information. As more details emerge, Under Armour is working to manage the situation swiftly and transparently for their customers.
