Everest Ransomware Group Breaches Under Armour, Exposing 343 GB of Data

Feeds.Feedburner

Everest Ransomware Group Breaches Under Armour, Exposing 343 GB of Data

First seen 23 Nov 2025, 04:45 UTC • •61.8

Article Content

1 / 9

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

The Everest ransomware group has claimed responsibility for a significant data breach involving Under Armour, reportedly stealing 343 GB of sensitive internal data. The exposed data includes customer information, purchase history, and product details, potentially affecting millions of users worldwide. The group has displayed sample data on their dark web leak site and issued a seven-day ultimatum.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 221d ago How this analysis works

More articles in this cluster (8)

Threat Graph

11 entities, 18 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (5)

Data Breach
DDoS
Malware
Ransomware
T1566 - Phishing

Organization (4)

Air Miles España
Iberia
Petrobras
Under Armour

Threat Actor (2)

Everest
Everest Ransomware Group

Relationships

Everest uses Data Breach
Everest uses DDoS
Everest uses Malware
Everest uses Ransomware
Everest uses T1566 - Phishing
Everest Ransomware Group uses Data Breach
Everest Ransomware Group uses DDoS
Everest Ransomware Group uses Malware
Everest Ransomware Group uses Ransomware
Everest Ransomware Group uses T1566 - Phishing
Everest targets Air Miles España
Everest targets Iberia
Everest targets Petrobras
Everest targets Under Armour
Everest Ransomware Group targets Air Miles España
Everest Ransomware Group targets Iberia
Everest Ransomware Group targets Petrobras
Everest Ransomware Group targets Under Armour

Following this threat?

Track Everest and Air Miles España in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

FlyDubai Ransomware Attack Exposes Sensitive Data and Boeing Code The Everest ransomware gang claims to have exfiltrated 4.36GB of data from FlyDubai, including personal records of 2,862 employees and Boeing proprietary source code. The stolen data reportedly includes pilot training materials and operational directives, with some files marked as 'Boeing Proprietary, Confidential…

Asus eShop Data Breach Exposes Customer Order Information Asus has confirmed a data breach affecting its online store, where unauthorized access to customer order information occurred. The breach, disclosed via email to customers, revealed that details such as names and order records may have been accessed, although no financial information was compromised. Asus stated that…