UA

Confirmed breach

Under Armour data breach

Country being checked · underarmour.com

A breach of Under Armour was added to Have I Been Pwned’s breach database on 21 January 2026. It affected 72,742,892 accounts. Exposed: Email addresses, Dates of birth, Names, Genders, Geographic locations and Purchases. The breach began on 17 November 2025, 65 days before it was reported.

Status

Confirmed breach

People affected

72,742,892 accounts

Reported

21 January 2026

Breach began

17 November 2025

Time to tell

65 days (the median in California’s notices over the last year: 154 days)

What was exposed

• Email addresses
• Dates of birth
• Names
• Genders
• Geographic locations
• Purchases

Sources

• Breach database · 21 January 2026 · 72,742,892 accountsHave I Been Pwned

Breach databases are read by code. · Corrections and changes

If Under Armour had your data

1. Look for Under Armour’s own notice or letter: it should say what of yours was involved. Keep it.
2. Expect scams that use your details: calls, texts or emails pretending to be Under Armour, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

• Spot the scams that use leaked data →
• What to do after a data breach →

Email me if Under Armour has another breach

Alert me

One email to confirm first. We use your address only for this alert, and one click deletes it.

Earlier breaches at Under Armour

From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.

1. 29 March 2018 California Attorney General

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.