Ransomware Groups Claim Data-Theft Attacks Against Major Sportswear Brands

Under Armour customer data tied to an Everest ransomware intrusion was added to Have I Been Pwned, including ~72 million email addresses and additional fields such as names, birthdates, gender, purchase details, and location information. Reporting notes Everest previously claimed theft of 343 GB from Under Armour and threatened public release if negotiations did not occur; commentary also highlighted the downstream risk of exposed data enabling targeted phishing and social engineering, and described Everest as expanding beyond encryption into initial access brokering using remote access tools and weak credentials.

Separately, Nike was listed by the WorldLeaks ransomware/extortion group on its darknet leak site, with the actor claiming data exfiltration and threatening to publish stolen data. Nike publicly stated it is investigating a potential cybersecurity incident, while the attacker’s post provided limited verifiable detail and the total volume of data remains unconfirmed; the report alleged exposure could include internal documentation and customer/employee information, and described WorldLeaks as an extortion-only rebrand of Hunters International focused on data theft rather than file encryption.