Hims & Hers - Customer Support System Hacked in Breach
Hims & Hers, a telehealth company, had its customer support system hacked. Hackers tricked employees into giving them access, and they stole names and email addresses of customers. Although medical records were safe, customers should be careful and change their passwords.
Hims & Hers confirms a data breach affecting its customer support platform, revealing sensitive customer information was compromised through a social engineering attack.
What Happened
Hims & Hers, the telehealth company known for providing weight-loss and sexual health prescriptions, has confirmed a significant data breach affecting its third-party customer service platform. The breach occurred between February 4 and February 7, 2026, when hackers exploited a social engineering attack to gain unauthorized access to the system. The company filed a data breach notice with the California attorney general's office, as required by law when 500 or more state residents are affected.
Who's Affected
While the exact number of individuals impacted by the breach remains unknown, the company has acknowledged that customer names and email addresses were among the data compromised. Although Hims & Hers has stated that customer medical records were not affected, the nature of customer support systems means that the stolen data may still contain sensitive information related to personal accounts and healthcare.
What Data Was Exposed
The stolen data primarily included customer names and email addresses. However, Hims & Hers has not disclosed the full extent of the other personal data that may have been compromised, leaving customers uncertain about the potential risks. The breach highlights a growing trend where customer support systems are increasingly targeted by financially motivated hackers seeking to extort companies.
What You Should Do
Customers of Hims & Hers are advised to monitor their email accounts for any suspicious activity and to change their passwords as a precaution. It is also recommended to enable two-factor authentication wherever possible to enhance account security. As the investigation continues, Hims & Hers has not indicated whether any ransom demands were made by the hackers, which adds another layer of concern for those affected.
This incident underscores the importance of cybersecurity awareness and the need for companies to implement robust security measures to protect sensitive customer information from similar attacks in the future.