2026 Hims & Hers — third-party customer service platform (social engineering; Feb 4–7)

Hims & Hers Inc., a U.S. telehealth company, disclosed unauthorized access to a third-party customer service platform used for support tickets. The company reported becoming aware of suspicious activity on February 5, 2026, and determined that ticket data may have been accessed or acquired without authorization between approximately February 4 and February 7, 2026. Public summaries described exposure of names, email addresses, phone numbers, and postal addresses from service tickets; some notices referenced treatment-category or other customer-service ticket content for users who had contacted support over a longer historical window. Hims & Hers stated core clinical records and communications between patients and licensed providers were not involved. Secondary reporting and class-action summaries cited social engineering targeting vendor-side personnel (e.g., two employees in some accounts). Direct notifications to consumers were summarized in press into April 2026.