Under Armour Investigates Data Breach Claims After 72M Records Exposed Online
Under Armour, the renowned clothing and fitness data company, is currently conducting an investigation into allegations of a major data breach. Reports emerged that a cybercriminal posted personal records of approximately 72 million customers on a hacker forum.
Details of the Data Breach
The breach, attributed to the Everest ransomware gang, reportedly occurred in November. The gang made claims of responsibility on its dark web leak site at that time. This week, the breach was further validated when the data notification service, Have I Been Pwned, confirmed receipt of the stolen information.
Impacted Information
The dataset disclosed contains a variety of sensitive information, including:
- Names
- Email addresses
- Genders
- Dates of birth
- Approximate locations based on postal codes or ZIP codes
- Purchase history data
Furthermore, it includes numerous email addresses belonging to Under Armour employees. A sample provided to TechCrunch appeared to corroborate the type of data Have I Been Pwned reported.
Under Armour’s Response
When contacted, Under Armour spokesperson Matt Dornic confirmed awareness of claims regarding unauthorized data access. He stated, “Our investigation is ongoing with help from external cybersecurity experts.” Importantly, he noted there is currently no evidence indicating that UA.com or the systems handling payments and customer passwords were impacted.
Dornic emphasized that only a small percentage of affected customers had sensitive information compromised. However, he did not specify what types of information Under Armour considers sensitive, nor did he provide a precise number of impacted customers.
Customer Notification and Hacker Communications
As of now, Under Armour has not disclosed whether it will notify customers about the breach or if it has received any ransom demands from the hackers. Concerns about the extent of the data breach remain prevalent, as there are claims regarding the potential compromise of sensitive information.
In summary, the situation at Under Armour highlights the ongoing risks of data security breaches and their implications for millions of customers. This incident serves as a reminder for all companies to secure their data and protect customer information diligently.
