Hims & Hers Support Ticket Breach Exposes Sensitive Customer Data
Hims & Hers disclosed a breach of its third-party customer support ticketing system from February 4 to 7. Attackers accessed and stole support tickets containing customer names, contact information, and other redacted personal data. The company says medical records were not accessed, but support tickets often include sensitive health-related details embedded in customer communications.
This breach highlights that third-party support platforms can expose contextual personal and health information even without direct access to electronic health records. Such data can enable phishing, impersonation, or account takeover attacks. Organizations should treat support ticket data as highly sensitive and audit third-party integrations accordingly.
Hims & Hers warns of data breach after Zendesk support ticket breach
Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform.