Millions of stolen Under Armour customer emails added to Have I Been Pwned

Under Armour had 72 million email addresses stolen by the Everest ransomware gang in a November attack published to the Have I Been Pwned website earlier this week, according to TechRepublic.

Multiple records were also observed to feature names, birthdates, genders, purchase details, and location information. Such a development comes two months after Everest claimed to pilfer 343 GB of data from Under Armour's systems, which it threatened to expose within a week should the U.S. sportswear firm refuse to enter negotiations. Everest, which has recently taken responsibility for compromising AT&T, Collins Aerospace, and Coca-Cola Europacific Partners, was noted to have evolved from a typical ransomware operation to also working as an initial access broker, while harnessing remote access tools and weak credentials. Meanwhile, ESET Ireland's George Foley highlighted the possible significant cyber threats following widespread data exposure.

"They do not stop at the data that was taken. They use it to create believable follow-up emails, texts, and even phone calls that look like they are coming from the company involved. The aim is to trick people into handing over more information, clicking a link, resetting a password through a fake page, or sharing payment details," said Foley.