Hello Cake Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Hello Cake, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Hello Cake, Inc.
Hello Cake is a consumer goods sexual wellness company. Founded in 2018 and based in North Hollywood, California, Hello Cake develops and markets a range of products designed to support healthy, shame-free sexual experiences for adults. Their offerings include sex toys, personal lubricants, condoms and doctor-prescribed medications for sexual health issues such as erectile dysfunction and female sexual dysfunction.
The company was started by Hunter Morris and Mitch Orkis, with a mission to make sexual wellness products more approachable and inclusive. As of 2023, Hello Cake reported estimated annual revenue between $30–50 million and had approximately 29 employees listed on LinkedIn.
What Happened?
On July 25, 2025, Hello Cake experienced a data breach involving a file stored in a cloud-based storage system. The breach occurred after a routine migration, when a single file was given an incorrect access setting. This file was accessible only through its exact internet address and was not searchable or browsable online. However, an unauthorized third party accessed and copied the file.
The company discovered the breach on Aug. 22, 2025, and promptly removed the file, corrected the security settings and began an investigation with cybersecurity experts. According to Hello Cake, no other systems or files were affected and no Social Security numbers, driver’s license numbers or financial account information were involved.
Information Types Exposed:
- Full name
- Date of birth
- Name of prescribed medication
- Prescription identifier
The breach was disclosed to the California Attorney General’s office on Sept. 19, 2025. The incident was also discussed on the dark web, with a threat actor named “888” claiming responsibility and posting about the breach on July 21, 2025.
Your Rights and Next Steps
If you received a notice from Hello Cake about this breach, you have important rights and options. The company’s notice recommends that affected individuals remain vigilant for incidents of fraud and identity theft by monitoring account statements and credit reports. They also provide information on how to obtain a free credit report, place a fraud alert or security freeze on credit files and report suspected identity theft to the Federal Trade Commission or law enforcement.
Here are recommended next steps:
- Review the notice you received from Hello Cake for specific details about your information
- Obtain a free credit report from each of the nationwide credit reporting agencies
- Consider placing a fraud alert or a security freeze on your credit file to help prevent unauthorized activity
- Monitor your financial accounts and credit reports for suspicious activity
Lawyers are ready to help individuals who may have been affected by the Hello Cake data breach. If your information was exposed, you may have legal options to seek compensation for any harm or risk you have experienced.
You May Be Entitled to Compensation
If you were affected by the Hello Cake data breach, you may be eligible for compensation. Lawyers are actively investigating claims related to this incident and can help you understand your rights.
To find out if you qualify to join a lawsuit or claim compensation, complete the below form.