Telehealth company Hims & Hers suffered a data breach between February 4-7 when hackers accessed customer support tickets containing names, email addresses, and medical information. The ShinyHunters group claimed responsibility for the attack on the third-party support platform.
This breach is particularly concerning because Hims specializes in sensitive health issues like erectile dysfunction, hair loss, and mental health—conditions that carry significant stigma. The exposed data could potentially enable blackmail attempts against affected customers.
Hims took a month to determine what information was compromised and another month to notify customers. The company is offering free credit monitoring to impacted users.
Source: Dark Reading