Hims Exposes Sensitive PHI

On April 10, 2026, the telehealth company Hims & Hers Health suffered a data breach via its third-party customer support platform. The ShinyHunters group claimed responsibility for the attack but this has not been verified by Dark Reading. As a result of the ultra-sensitive nature of some Hims products, customers are at risk of embarrassing fallout and potentially exposed to names and unspecified medical information belonging to "a limited set" of affected customers, with email addresses also impacted. The breach occurred between February 4th and 7th, when hackers maintained access to customer support tickets containing sensitive personal health information (PHI), which was not secured promptly by the company despite being aware of suspicious activity as early as February 5th.