Hims & Hers Discloses Third-Party Data Breach Affecting Customer Support Tickets Hims & Hers, a U.S.-based telehealth company, reported a data breach involving unauthorized access to its third-party customer service platform. The incident, detected on February 5, 2026, exposed personal information from service tickets submitted between February 4 and 7, 2026. The breach targeted support requests managed by an external vendor, where customer interactions including names and contact details were accessed without authorization. The company confirmed on March 3, 2026, that a limited number of individuals were affected, though the total figure remains undisclosed. Notably, medical records and provider communications were not compromised. Hims & Hers responded by securing the platform and launching an investigation. Affected individuals were notified via letters dated April 2, 2026, and offered 12 months of complimentary credit monitoring and identity restoration services through Cyberscout (a TransUnion subsidiary). The services include single-bureau credit monitoring, fraud alerts, and proactive assistance. Enrollment requires a unique code from the notification letter and must be completed within 90 days. The company reported the breach to the California Attorney General and provided a dedicated support line (1-833-319-5614) and mailing address for inquiries. No further details on the breach’s origin or the threat actor involved have been released.