Under Armour Suffers Major Ransomware Breach

In a concerning development, Under Armour, a leading sportswear brand, has fallen victim to a significant ransomware breach. The Everest ransomware group targeted the company, leading to a massive data leak exposing millions of users’ personal information globally.

In November 2025, hackers managed to steal an astounding 343 GB of sensitive data and demanded a ransom. The breach revealed the email addresses of 72 million users, along with names, birthdates, genders, locations, and purchasing information. On January 21, it was divulged that this data had been leaked on a notorious hacking forum.

Introducing the Everest Gang

The Everest ransomware group stands out as a menacing force in the cybercriminal world. Founded in December 2020, they have progressed from basic ransomware activities to becoming an Initial Access Broker, selling access to compromised systems.

High-profile targets like Coca-Cola Europacific Partners and AT&T showcase their strategy of attacking lucrative global enterprises. Utilizing remote access tools such as AnyDesk, they exploit weak credentials to infiltrate systems. Their ransomware encrypts files with advanced algorithms, leaving them with the ‘.EVEREST’ extension.

Following the Under Armour breach, Everest announced their success on November 16, 2025, threatening to release the stolen data without prompt communication.

Protect Yourself

After such an extensive data breach, cybersecurity experts highlight the risk of further attacks using the stolen information. George Foley from ESET Ireland warns of malicious actors creating convincing phishing attempts mimicking Under Armour communications.

ESET advises vigilance regarding unsolicited messages about account issues or security verifications. Avoid clicking on links in these messages and change any shared-password accounts immediately. Enhance security by using multi-factor authentication and staying alert to phishing attempts using personal info.

This incident emphasizes the need for strong cybersecurity measures and awareness in protecting personal data.

**Stay informed and protect your data. Qsentinel offers insights into maintaining cybersecurity.**

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.