- Hackers have posted data they claim is stolen from Under Armour
- It includes PII from customers and employees
- UA is the latest in string of retailers attacked in recent months
The notorious Everest ransomware group has claimed sportswear maker and retailer Under Armour as its latest victim – with the group posting what it claims is a sample of ‘more than millions of personal data’ and internal company data onto a dark web site.
The dark leak site post claims the hackers have accessed and exfiltrated 343GB of data from internal sources, noting; “The leak of your internal company documents contains a huge variety of personal documents and information of clients and employees’.
The group has given Under Armour seven days to contact them, presumably to negotiate a ransom payment, posting a countdown timer alongside a warning to follow their instructions ‘before time runs out’.
Customers at risk
The sample of the data posted by hackers to verify the leak’s authenticity contained personally identifiable customer information, including email addresses, phone numbers, order histories, location data, and transaction data.
TechRadar Pro has reached out to Under Armour to confirm if the incident is legitimate, but we have yet to receive a response,.
If the breach is legitimate, it could put thousands of customers at risk, particularly of identity theft, social engineering, and fraud – so it’s important to check out identity theft protection software if you’re concerned – and keep a close eye on your accounts and statements.
To protect yourself from social engineering, the key is to be wary of any unexpected communications – like texts and emails from email addresses you don’t recognize – and pay close attention for anything in the email that may not be legitimate – like an email from gma1l rather than gmail, for example.
If the ransom claim is legitimate, and unfortunately there doesn’t seem to be any reason to think it’s not, then Under Armour will be the latest in over 250 victims that the Everest group has victimized since 2023, with high profile disruptions – including affecting millions of passengers in an attack on a Dublin Airport supplier.
Via: Cybernews
