Hims & Hers data breach exposes customer support data

Telehealth company Hims & Hers has confirmed a data breach impacting its third-party customer service platform. The incident, which occurred between February 4 and February 7, involved hackers accessing support tickets containing customer personal information. The company stated that customer medical records were not affected by the breach, TechCrunch reports.

The breach was a result of a social engineering attack, where hackers tricked employees into granting system access. Stolen data primarily included customer names and email addresses, though the company has not specified the full extent of other personal data compromised.

Hims & Hers filed a data breach notice with the California attorney general's office, as required by law if 500 or more state residents are affected. The exact number of individuals impacted remains unknown. Customer support systems are increasingly becoming targets for financially motivated hackers seeking to extort companies.

Source: TechCrunch