Hims & Hers Telehealth Confirms Customer Support System Breach

Hims & Hers has confirmed a breach that targeted its third-party customer service platform. The company disclosed the incident in a data breach notice filed with the California attorney general.

Scope and timeline

Company filings say attackers accessed a third-party ticketing system. The breach occurred between February 4 and February 7.

Support tickets were copied, according to the notice. Those tickets contained personal information submitted by customers.

Types of data exposed

The notice states hackers stole customer names and contact details. Other personal data were taken but redacted from the public filing.

Hims & Hers says medical records were not accessed. Still, support logs can include account and healthcare details.

Extent and legal thresholds

It remains unclear how many people were affected. California law requires disclosure when 500 or more residents are involved.

The company has not released a total number of impacted individuals. Investigations are ongoing.

Cause and company response

Spokesperson Jake Martin told Filmogaz.com investigators found a social engineering attack. Employees were tricked into granting access.

Martin said the stolen data primarily included customer names and email addresses. The company declined to detail other specific fields taken.

Ransom and attacker communications

Hims & Hers would not confirm any communication from the attackers. The company has not said whether a ransom demand occurred.

Industry context

Customer support and ticketing systems have become frequent targets. Hackers use such systems to harvest data and demand payment.

Search engines now index terms like Hims & Hers Telehealth Confirms Customer Support System Breach. That reflects public interest in these incidents.

Related incidents

Last year, Discord suffered a breach of its support ticketing platform. The attack exposed government-issued IDs for about 70,000 users.

That incident highlights risks when companies collect identity documents during verification.

Next steps for customers

Customers should monitor account activity and watch for suspicious messages. They should update passwords and enable multi-factor authentication where possible.

Regulators and Hims & Hers will likely continue to investigate. More disclosures may follow as the situation develops.