Hims & Hers Health, a major telehealth provider, is alerting customers about a data security event impacting a third-party customer support system.

Hims & Hers is a U.S.-based telehealth business focused on direct-to-consumer healthcare, providing subscription services for various conditions like hair loss, erectile dysfunction, mental health, skincare, weight management, and other health-related needs.

It’s a leading online pharmacy and telehealth brand in the United States, known for its extensive marketing and generating nearly $1 billion in annual revenue.

According to a notification sample provided to California authorities, the data incident occurred in early February 2026.

“On February 5, 2026, Hims & Hers, Inc. detected unusual activity affecting our third-party customer support platform,” the notification to affected individuals stated.

“We immediately took action to secure the platform and began an investigation to determine the nature and extent of the potential security issue.”

“The investigation revealed that between February 4, 2026, and February 7, 2026, certain support tickets submitted to our customer service team were accessed or obtained without proper authorization.”

Following an internal review, the company determined on March 3rd that hackers had gained unauthorized access to support tickets, some of which contained personal information.

The compromised information might include names, contact details, and other unspecified information potentially related to the original support request.

The company emphasized that no medical records or communications with doctors were affected in the incident.

While the company didn’t go into further details, BleepingComputer reported last month that the ShinyHunters extortion group was responsible for the breach.

The data was reportedly exfiltrated as part of a widespread campaign where malicious actors compromised Okta SSO accounts to infiltrate third-party cloud storage services and SaaS platforms and steal data.

In this specific attack, BleepingComputer learned that the threat actors utilized the compromised Okta SSO account to access Hims & Hers’ Zendesk account and exfiltrated millions of support tickets.

The company is now offering affected customers 12 months of complimentary credit monitoring.

Customers are also advised to be extra cautious of unsolicited communications that could be phishing attempts or social engineering scams. They are advised to check their account statements and credit reports for any unusual activity.

BleepingComputer has contacted Hims & Hers for additional information on the incident and the number of impacted users, but has not received a response as of publishing time.

Recent high-profile customer support breaches that led to client data exposure include DIY retailer ManoMano in February and Crunchyroll in March. In both instances, the compromised platform was Zendesk.