Telehealth giant Hims & Hers says its customer support system was hacked

Hims & Hers, a prominent telehealth company specializing in weight loss and sexual health medications, has reported a data breach that compromised its third-party customer service platform. In a notice submitted to the California attorney general's office, the company revealed that hackers accessed its customer support system, stealing sensitive data linked to user inquiries. The breach occurred between February 4 and February 7, during which attackers infiltrated the third-party ticketing system, obtaining a significant volume of support tickets that included personal details submitted by customers. Although Hims & Hers assured that medical records were not part of the breach, the nature of customer support data may still include sensitive account information and personal health details. At this point, the extent of the breach, including the number of affected individuals, remains unclear. California law mandates that companies disclose breaches impacting 500 or more residents, underscoring the seriousness of the situation. A spokesperson for Hims & Hers, Jake Martin, informed TechCrunch that the incident was a result of a social engineering attack, where hackers deceived employees into granting system access. He noted that the compromised data largely consisted of customer names and email addresses, but specifics on other data types remain undisclosed. The company has not confirmed whether it has received any ransom demands from the attackers. Customer support systems have increasingly become targets for hackers seeking financial gain, with many companies falling victim to similar schemes. A notable case involved Discord last year, where a breach of its customer support system led to the exposure of official identification documents for approximately 70,000 users seeking age verification.