Under Armour class action alleges company failed to protect customer data

Under Armour data breach class action overview:

• Who: Plaintiff Orvin Ganesh filed a class action lawsuit against Under Armour Inc.
• Why: Ganesh claims Under Armour failed to properly safeguard and secure sensitive customer data.
• Where: The class action lawsuit was filed in Maryland federal court.

A new class action lawsuit alleges Under Armour failed to properly safeguard and secure sensitive customer data in a data breach allegedly caused by the Everest ransomware group.

Plaintiff Orvin Ganesh claims Under Armour failed to take precautions designed to keep individuals’ personally identifiable information (PII) secure despite having “numerous” statutory, regulatory, contractual and common law duties and obligations to do so.

Ganesh wants to represent a nationwide class of individuals whose PII was compromised in the Under Armour data breach, which allegedly occurred in November 2025.

“Plaintiff and the class reasonably expected the defendant to keep their PII confidential and securely maintained, to use this information for business purposes only, and to make only authorized disclosures of this information,” the Under Armour class action lawsuit says.

Under Armour data breach exposed data of millions of customers, class action claims

Ganesh argues Under Armour failed to implement and maintain reasonable safeguards, comply with industry-standard data security practices and laws and regulations governing data security and properly train its employees on data security measures and protocols, among other things.

“By implementing and maintaining reasonable safeguards and complying with standard data security practices, the defendant could have prevented this Under Armour data breach,” the class action lawsuit states.

The lawsuit claims that Under Armour has not acknowledged the data breach or notified impacted individuals that their sensitive personal data has been exposed.

The data breach exposed the PII of millions of Under Armour customers and employees from various countries, according to the Under Armour class action, which argues the Everest ransomware group published sample data of PII to substantiate their claim.

Ganesh claims Under Armour is guilty of negligence, negligence per se, breach of implied contract, unjust enrichment, invasion of privacy and declaratory judgment.

In another Under Armour class action lawsuit, a group of customers have accused the company of advertising false price discounts for merchandise sold throughout its outlet stores.

Did you have your data exposed in the Under Armour data breach? Let us know in the comments.

The plaintiff is represented by Jason S. Rathod of Migliaccio & Rathod LLP and Beena M. McDonald, Alex M. Kashurba and Holly E. Jones of Chimicles Schwartz Kriner & Donaldson-Smith LLP.

The Under Armour data breach class action is Ganesh v. Under Armour Inc., Case No. 1:25-cv-04106-MJM, in the U.S. District Court for the District of Maryland.

Read About More Class Action Lawsuits & Class Action Settlements:

• Roblox child sexual exploitation lawsuits consolidated in California MDL
• Los Angeles jury orders Johnson & Johnson to pay $40 million over talc cancer claims
• Kidde, First Alert smoke alarm class action claims products fail to detect smoldering fires
• Corkcicle class action claims company charges hidden delivery fee