Under Armour Ransomware Attack Exposes 72M Email Addresses

The Everest ransomware group reportedly exfiltrated 343 GB of Under Armour data (including an estimated 72 million email addresses and other PII) and posted the data publicly after issuing extortion demands. The report profiles Everest as a sophisticated criminal enterprise and initial access broker that uses stolen credentials and remote access tools (AnyDesk, Splashtop) and deploys AES/DES encryption with a '.EVEREST' extension; it warns consumers and organizations about imminent phishing and account takeover risks and recommends improved password hygiene and multifactor authentication.