Hims & Hers Data Breach Exposes Customer Service Records

Hims & Hers Inc., a telehealth company that connects users to licensed healthcare providers for personalized treatments, disclosed a data breach involving its third-party customer service platform.

The breach occurred in February 2026, but the total number of individuals affected in the United States has not been disclosed.

The breach was reported to the California Attorney General. Hims & Hers first detected suspicious activity on Feb. 5, 2026. Consumer notification letters are dated April 2, 2026, according to the notice sent to affected individuals.

What happened in the Hims & Hers data breach

The breach centered on unauthorized access to the third-party customer service platform Hims & Hers uses to manage support requests. After detecting the suspicious activity, the company stated that it took steps to secure the platform and initiated an investigation into the nature and scope of the incident.

The investigation determined that from Feb. 4 to Feb. 7, 2026, certain tickets sent to the company's customer service team were accessed or acquired without authorization. Service tickets are records created when customers contact a company's support team and typically contain the personal details customers provide in those interactions.

Following a comprehensive review of the affected service tickets, the company identified on March 3, 2026, that personal information related to a limited set of individuals was present in the compromised records. The review was conducted to determine what information was involved and to whom it related.

The types of personal information exposed included names and contact information. The company stated that customer medical records were not impacted by the incident. Communications between customers and healthcare providers on the Hims & Hers platform were also not affected, according to the notification.

Hims & Hers' response to the breach

Hims & Hers is offering affected individuals 12 months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation services.

The services include single bureau credit monitoring, a single bureau credit report, a single bureau credit score and proactive fraud assistance. Credit monitoring alerts individuals when changes occur on their credit file, and notifications are sent the same day that the change takes place, according to the notification.

Affected individuals can enroll in the monitoring services online using a unique code provided in their notification letter. Enrollment must be completed within 90 days from the date of the letter.

For questions about the incident, affected individuals can call a dedicated assistance line at 1-833-319-5614, Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, excluding U.S. holidays. They can also write to Hims & Hers at 2269 Chestnut St. #523, San Francisco, CA 94123.

Steps to take if your information was exposed

• Place a fraud alert on credit files by contacting any one of the three major credit bureaus: Equifax (1-888-298-0045), Experian (1-888-397-3742) or TransUnion (1-833-799-5355).
• Consider placing a credit freeze with all three credit bureaus to prevent new accounts from being opened without express authorization.
• Request free credit reports at AnnualCreditReport.com and review them for any unfamiliar accounts or unauthorized activity.
• Watch for phishing attempts that reference Hims & Hers or this data breach by name, as exposed contact information could be used to send convincing scam messages by email, phone or text.
• Monitor financial accounts by reviewing bank and credit card statements regularly for any suspicious or unauthorized transactions and reporting concerns promptly to the relevant financial institution.
• Report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov or by calling 1-877-438-4338.