Skip to content
Tech News
← Back to articles

Hims & Hers warns of data breach after Zendesk support ticket breach

read original get Zendesk Support Ticket Management → more articles
Why This Matters

The data breach at Hims & Hers highlights the ongoing cybersecurity risks faced by telehealth companies, especially those relying on third-party platforms. This incident underscores the importance for consumers and the industry to prioritize robust security measures to protect sensitive personal information. As cyber threats evolve, companies must strengthen their defenses to maintain trust and ensure data privacy.

Key Takeaways

Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform.

Hims & Hers is an American telehealth company specializing in the direct-to-consumer healthcare space, providing subscription-based treatments for hair loss, ED, mental health, skincare, weight loss, and other conditions or needs.

It is one of the most successful U.S. brands in the online pharmacy and telehealth space, with strong marketing presence, and annual revenues close to $1 billion.

According to a sample of the notification shared with the authorities in California, the data breach occurred in early February 2026.

"On February 5, 2026, Hims & Hers, Inc. became aware of suspicious activity affecting our third-party customer service platform," reads the letter sent to impacted individuals.

"We promptly took steps to secure our customer service platform and initiated an investigation into the nature and scope of the potential security incident."

"The investigation determined that from February 4, 2026, to February 7, 2026, certain tickets sent to our customer service team were accessed or acquired without authorization."

Following an internal investigation, the company determined, on March 3, that hackers had accessed support tickets that, in some cases, contained personal information.

The exposed information may include names, contact information, and other unspecified data, likely related to the support request submitted in each case.

The company underlined that no medical records or doctor communications were compromised in this incident.

... continue reading