Hims & Hers Data Breach Exposes Customer Support Data
Basically, hackers tricked employees to access customer support data.
A data breach at Hims & Hers has exposed customer support data. Hackers accessed personal information through social engineering tactics. Customers should be vigilant and monitor their accounts for suspicious activity.
What Happened
Telehealth company Hims & Hers recently confirmed a significant data breach affecting its third-party customer service platform. The breach occurred between February 4 and February 7, 2026, when hackers accessed support tickets that contained personal information of customers. Fortunately, the company stated that no medical records were compromised during this incident.
Who's Affected
While the exact number of individuals impacted remains unknown, Hims & Hers has filed a data breach notice with the California attorney general's office. This filing is required by law when 500 or more state residents are affected. The breach primarily involved customer names and email addresses, but the full extent of the compromised data has not been disclosed.
What Data Was Exposed
The stolen data primarily included:
- Customer names
- Email addresses
Although the company has not specified other personal data that may have been compromised, the breach highlights the potential risks associated with customer support systems.
What You Should Do
If you are a customer of Hims & Hers, it’s crucial to remain vigilant. Here are some recommended actions:
- Monitor your email for suspicious activity or phishing attempts.
- Change your passwords, especially if you use the same password across multiple sites.
- Consider enabling two-factor authentication (2FA) on your accounts for added security.
The Threat
This breach is a stark reminder of how customer support systems are increasingly becoming targets for hackers. Financially motivated attackers often exploit these systems to gain sensitive information, which can lead to further attacks or extortion.
Defensive Measures
Organizations must take proactive steps to secure their customer support platforms. This includes:
- Implementing robust training for employees to recognize social engineering tactics.
- Regularly updating security protocols and software to mitigate vulnerabilities.
- Conducting thorough audits of third-party vendors to ensure they adhere to strict security standards.
In conclusion, the Hims & Hers data breach underscores the importance of securing customer support systems against social engineering attacks. As cyber threats evolve, companies must remain vigilant and prioritize data protection.