top of page

Under Armour faces a serious cyberattack breach

The sports brand Under Armour is facing a serious incident after a ransomware group claimed to have stolen 343 GB of internal information. This cyberattack breach includes data that could put both customers and employees at risk, affecting operations in several countries.


cyberattack breach

Impact of the cyberattack breach on customer and employee data


The attackers published part of the stolen files as a sample, claiming to have obtained transaction histories, identification data, addresses, phone numbers, emails, passport information, and both professional and personal records of company personnel.


In addition, corporate documents, complete inventories, product catalogs, behavioral analyses, marketing records, and other strategic items were stolen. The exposure of such detailed data increases the risk of fraud, identity theft, and other schemes that can remain active for months.


The group responsible gave a deadline of one week for the ransom to be paid, although the amount requested has not been disclosed.

Lessons for Mexico and its cybersecurity landscape


Although this incident occurred outside Mexico, it serves as a clear reference point for the Mexican retail and textile sector, which is also facing an increase in ransomware attacks.


Mexican companies with digital operations and e-commerce should consider this case a warning to strengthen access controls, digital inventory protection, sensitive data management, and internal incident response protocols.


A contrast with the brand's launches


The cyberattack coincides with the announcement of the Halo Q4 collection, with which Under Armour seeks to strengthen its presence in the urban sports market. However, at the time of writing, the company had not issued an official statement on the incident.


This is not its first episode related to digital security: in 2018, the MyFitnessPal app, acquired by the company, suffered a breach that affected millions of users.

A group with a history of high risk


The ransomware operation responsible for this attack has been active since 2021 and has been involved in significant incidents compromising information in critical sectors.


Its track record shows aggressive tactics and clear financial motives, underscoring the importance of organizations strengthening their cybersecurity strategies before they become a target.

At Cyberpeace, we remind you that a cyberattack breach can affect any organization, regardless of its size or sector. Staying informed and adopting good security practices is key to protecting sensitive data and avoiding major risks. Want to continue learning about cybersecurity and how to strengthen your digital environment? Follow us on our social media channels and stay up to date with the latest news.


Comments


Cyberpeace_Working table 1 copy 8.png

Cyberpeace Copyright © 2025 - All rights reserved.

TLP:WHITE

bottom of page