Hims & Hers disclosed a data security incident affecting a limited number of individuals after unauthorized access to its customer service platform earlier this year.
The company said it discovered suspicious activity Feb. 5 involving a third-party customer service system and launched an investigation shortly after. The review found that between Feb. 4 and Feb. 7, certain customer service tickets were accessed without authorization, according to an April 2 filing with the California Attorney General’s Office.
Hims & Hers determined March 3 that personal information tied to some individuals was included in the compromised tickets. The exposed data may include names and contact information, though the company said customer medical records and communications with healthcare providers were not affected.
In response, the company said it secured the platform, began identifying affected individuals and notified federal law enforcement. It also said it plans to notify regulators as required and is reviewing internal policies and procedures to help prevent similar incidents.
Hims & Hers is offering 12 months of complimentary credit monitoring and identity restoration services through Cyberscout to those potentially affected.
Hims & Hers is a telehealth and wellness company that provides online healthcare services and consumer health products for men and women.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
