Everest Ransomware Says It Stole Data of Millions of Under Armour Customers and 345GB of Internal Records
Source Reddit InfoSec News
Description
The Everest ransomware group claims to have stolen data belonging to millions of Under Armour customers along with 345GB of internal company records. This incident involves a significant data breach combined with ransomware activity, where sensitive customer and corporate data have been exfiltrated. Although no CVSS score is provided, the threat is assessed as medium severity due to the impact on confidentiality and potential reputational damage. There is no indication of known exploits in the wild or specific affected software versions. European organizations, particularly those in countries with strong retail and sportswear markets, could be indirectly impacted through supply chain or customer data exposure. Mitigation should focus on enhancing data protection, monitoring for ransomware indicators, and ensuring robust incident response plans. Countries like Germany, the UK, France, Italy, and Spain are most likely to be affected due to their market size and economic ties with global retail brands. The threat does not require user interaction for data theft but likely involves some level of initial access, making it moderately difficult to exploit. Defenders should prioritize data encryption, network segmentation, and continuous monitoring to reduce risk.