← MyFitnessPal

2026 Under Armour / MyFitnessPal — ~72.7M emails in HIBP reload (Jan)

2026 72.7M records affected Share on X

Data compromised

Email addresses and related credential or account metadata as indexed—overlap with 2018 incident expected

Technical writeup

Have I Been Pwned and consumer-data roundups in January 2026 surfaced a large Under Armour / MyFitnessPal–labeled credential or email set on the order of ~72.7 million addresses, widely interpreted by analysts as renewed visibility of recycled 2018 breach material, stealer logs, or reindexed forum dumps rather than a freshly confirmed perimeter intrusion at the same scale. Treat as a disclosure/indexing event pending any new Under Armour forensic statement distinct from the historic MyFitnessPal incident.

Root cause

Recirculation or recompilation of legacy breach/stealer data (per HIBP and analyst framing)

References