Hims & Hers has disclosed a data breach involving its third-party customer service platform, where hackers accessed and stole customer support records containing personal information.
The company said the intrusion occurred between February 4 and February 7, during which attackers gained access to its external ticketing system and exfiltrated customer-submitted data.
Nature Of The Compromised Data
According to a filing with California authorities, the stolen information includes customer names, contact details, and other unspecified personal data contained within support tickets.
While Hims & Hers stated that medical records were not affected, customer support interactions may still include sensitive details related to user accounts and healthcare inquiries.
A spokesperson said the compromised data “primarily included customer names and email addresses,” but the company did not provide a full breakdown of the data types involved.
Attack Method And Scope
The company attributed the breach to a social engineering attack, where attackers manipulated employees into granting access to internal systems.
It has not disclosed how many individuals were affected. Under California law, companies must report breaches involving 500 or more residents, but no specific figure has been released.
Hims & Hers also said it has not confirmed whether the attackers have made any demands, such as requesting payment in exchange for the stolen data.
Growing Targeting Of Support Platforms
Customer support and ticketing systems have become frequent targets for cyberattacks, as they often store large volumes of user-submitted information.
A recent example includes a breach at Discord, where attackers accessed support data that included government-issued identification documents submitted for age verification.
These systems can expose personal details even when core product databases, such as medical or financial records, remain unaffected.
Featured image credits: MarketBeat
For more stories like it, click the +Follow button at the top of this page to follow us.