Under Armour: Under Armour looking into data breach affecting customers' email addresses

Under Armour Investigates Data Breach Affecting 72 Million Customers

Under Armour is probing a data breach that exposed 72 million email addresses and personal details, including names, genders, birthdates, and ZIP codes. The incident, believed to have occurred late last year, was flagged by cybersecurity platform Have I Been Pwned, though the company has not issued an official disclosure.

In a statement, Under Armour asserted there is no evidence that its e-commerce platform (UA.com), payment systems, or customer passwords were compromised. Cybersecurity expert Troy Hunt, founder of Have I Been Pwned, noted the delay in public acknowledgment as unusual given the breach’s scale but acknowledged the challenges of responding to criminal attacks.

The company, headquartered in Baltimore, continues its investigation, emphasizing that claims of widespread sensitive data exposure remain unsubstantiated.

Federal Immigration Enforcement Sparks Backlash in Maine

A sweeping U.S. Immigration and Customs Enforcement (ICE) operation in Maine has drawn criticism from state officials and community leaders over its scope and lack of transparency. Governor Janet Mills, a Democrat, demanded federal authorities provide arrest warrants and real-time data, questioning the justification for targeting the state’s immigrant population roughly 4% of its 1.4 million residents.

ICE reported approximately 50 arrests on the first day of the operation, with 1,400 individuals identified as targets. The Department of Homeland Security (DHS) described the effort as focused on "the worst of the worst criminal illegal aliens," citing convictions for offenses like aggravated assault and child endangerment. However, Mills and local law enforcement raised concerns that arrests may not align with this stated priority.

Cumberland County Sheriff Kevin Joyce reported the detention of a corrections officer recruit hired in February 2024 after passing background checks, fingerprinting, and a polygraph despite his federally verified work authorization. Joyce called the arrest "bush-league policing," criticizing the heavy-handed tactics and lack of clarity surrounding the recruit’s immigration status.

The operation has heightened anxiety in immigrant communities, particularly in Portland and Lewiston, where families are avoiding public spaces, work, and schools. Businesses reliant on immigrant labor have also reported disruptions. Community leaders, including Biddeford resident Cristian Vaca a legally present roofer with a work permit described aggressive encounters with ICE agents, including threats against his family.

Federal prosecutors have warned against interfering with enforcement actions, while demonstrators in Portland and Scarborough protested the operation’s secrecy and perceived overreach. Mills, though respecting federal authority, questioned the necessity of the large-scale effort in a state with no recent surge in violent crime tied to immigrants. DHS and ICE have not provided updated arrest numbers or details on detainee locations.

Source: https://www.bastillepost.com/global/article/5552210-under-armour-looking-into-data-breach-affecting-customers-email-addresses

Under Armour cybersecurity rating report: https://www.rankiteo.com/company/under-armour

"id": "UND1769125431",
"linkid": "under-armour",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '72 million',
                        'industry': 'Apparel/Retail',
                        'location': 'Baltimore, Maryland, USA',
                        'name': 'Under Armour',
                        'size': 'Large',
                        'type': 'Corporation'}],
 'data_breach': {'number_of_records_exposed': '72 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'Moderate (Personally Identifiable '
                                        'Information, but no passwords or '
                                        'payment data)',
                 'type_of_data_compromised': ['Email addresses',
                                              'Names',
                                              'Genders',
                                              'Birthdates',
                                              'ZIP codes']},
 'description': 'Under Armour is investigating a data breach that exposed 72 '
                'million email addresses and personal details, including '
                'names, genders, birthdates, and ZIP codes. The incident was '
                'flagged by cybersecurity platform *Have I Been Pwned*, though '
                'the company has not issued an official disclosure.',
 'impact': {'data_compromised': 'Email addresses, names, genders, birthdates, '
                                'ZIP codes',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'None (payment systems not '
                                        'compromised)'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Have I Been Pwned'}],
 'response': {'communication_strategy': 'Limited public acknowledgment; no '
                                        'official disclosure yet'},
 'title': 'Under Armour Data Breach Affecting 72 Million Customers',
 'type': 'Data Breach'}