Hims & Hers - Data Breach Exposes Support Ticket Information
Basically, Hims & Hers had some customer support tickets stolen, which might include personal information.
Hims & Hers has reported a data breach affecting support tickets on Zendesk. Personal information may have been compromised, prompting the company to offer free credit monitoring. Customers are advised to stay vigilant against phishing attempts.
What Happened
Hims & Hers Health, a prominent telehealth provider, recently disclosed a data breach involving stolen support tickets from a third-party customer service platform, Zendesk. This incident was identified on February 5, 2026, when the company noticed suspicious activity affecting its customer service operations.
The breach occurred between February 4 and February 7, 2026, during which unauthorized access was gained to certain support tickets. An internal investigation confirmed that hackers had indeed accessed these tickets, which may contain personal information such as names and contact details.
Who's Affected
While the exact number of affected individuals remains unspecified, the breach has the potential to impact a significant portion of Hims & Hers' customer base. Given the company's annual revenue of nearly $1 billion and its extensive reach in the telehealth market, many users could be at risk.
What Data Was Exposed
The compromised support tickets may include:
- Names
- Contact information
- Other unspecified data related to customer support requests
Importantly, the company has confirmed that no medical records or doctor communications were compromised during this breach, which may provide some reassurance to affected customers.
What You Should Do
In response to the breach, Hims & Hers is offering 12 months of free credit monitoring services to all impacted users. Customers are encouraged to take the following precautions:
- Remain vigilant against unsolicited communications that may contain phishing attempts.
- Review account statements regularly for any suspicious activity.
- Monitor credit reports for any unusual transactions.
This incident is part of a broader trend, as the ShinyHunters extortion gang has been linked to this breach. They have been known to compromise accounts, such as Okta SSO, to access various third-party services, including Zendesk, and steal sensitive data. The company is actively investigating the incident and has taken steps to secure its customer service platform.
The breach highlights the vulnerabilities associated with third-party service providers and the importance of robust security measures in protecting customer data. Customers should remain proactive in safeguarding their information, especially in light of recent high-profile breaches involving similar platforms.