Under Armour ransomware breach: data of 72 million customers appears on the dark web

Reports indicate Under Armour was targeted by the Everest ransomware group in November 2025, with attackers claiming a database leak of 191,577,365 records (including 72,727,245 unique email addresses) that has been published and redistributed on underground forums; corporate statements describe ongoing investigations while litigation alleges negligence and large‑scale exfiltration. The article assesses the credibility of the leak, cites public leak site content and dark‑web distribution, and offers post‑breach consumer protection guidance.