Under Armour says it's 'aware' of data breach claims after 72M customer records were posted online | TechCrunch

"aware of claims that an unauthorized third party obtained certain data."

"Our investigation of this issue, with the assistance of external cybersecurity experts, is ongoing. Importantly, at this time, there's no evidence to suggest this issue affected UA.com or systems used to process payments or store customer passwords."

"What we know at this time is the number of affected customers with any sort of information that could be considered sensitive is a very small percentage."

Under Armour is investigating claims that millions of customer records were exposed after a cybercriminal posted data to a hacker forum. The seller said the data was taken in a November breach claimed by the Everest ransomware gang. Have I Been Pwned obtained a copy and notified about 72 million individuals. The stolen dataset included names, email addresses, genders, dates of birth, approximate locations by ZIP/postcode, purchase information, and numerous Under Armour employee email addresses. Under Armour said investigations with external cybersecurity experts are ongoing and that there is no evidence UA.com, payment systems, or customer password storage were affected, and that only a very small percentage of customers had potentially sensitive information exposed.

Read at TechCrunch