Under Armour Investigates Data Breach Affecting 72 Million Customers
Sportswear giant Under Armour is probing a major data breach that exposed the personal details of millions of customers. The incident, believed to have occurred in late 2023, compromised an estimated 72 million email addresses, along with additional data such as names, genders, birthdates, and postcodes.
While the company confirmed the breach, it stated there is no evidence that passwords or financial information were accessed. In an official statement, Under Armour clarified that its e-commerce platform (UA.com) and payment systems remained unaffected, dismissing claims of widespread exposure of sensitive data.
Cybersecurity researcher Troy Hunt, founder of Have I Been Pwned, supported Under Armour’s assessment, noting that available evidence aligns with the company’s findings. The investigation remains ongoing as the company works to determine the full scope of the incident.
Source: https://www.independent.co.uk/news/under-armour-baltimore-b2906001.html
Under Armour cybersecurity rating report: https://www.rankiteo.com/company/under-armour
"id": "UND1769139196",
"linkid": "under-armour",
"type": "Breach",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '72 million',
'industry': 'Sportswear/Apparel',
'name': 'Under Armour',
'type': 'Company'}],
'customer_advisories': 'Official statement confirming the breach and '
'clarifying unaffected systems',
'data_breach': {'number_of_records_exposed': '72 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Low to moderate (no passwords or '
'financial data)',
'type_of_data_compromised': ['Email addresses',
'Names',
'Genders',
'Birthdates',
'Postcodes']},
'date_detected': '2023',
'description': 'Sportswear giant Under Armour is probing a major data breach '
'that exposed the personal details of millions of customers. '
'The incident compromised an estimated 72 million email '
'addresses, along with additional data such as names, genders, '
'birthdates, and postcodes. The company confirmed the breach '
'but stated there is no evidence that passwords or financial '
'information were accessed.',
'impact': {'data_compromised': '72 million email addresses, names, genders, '
'birthdates, postcodes',
'identity_theft_risk': 'Potential',
'payment_information_risk': 'None'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cybersecurity researcher Troy Hunt (Have I Been '
'Pwned)'}],
'response': {'communication_strategy': 'Official statement confirming the '
'breach and clarifying unaffected '
'systems'},
'title': 'Under Armour Data Breach Affecting 72 Million Customers',
'type': 'Data Breach'}