Hims & Hers Data Breach Lawsuit Investigation
If you recently received a data breach letter from Hims & Hers, time is of the essence. A targeted cyber-incident between February 4 – 7, 2026 allowed unauthorized access to certain customer-service tickets containing personal information. Explore below to confirm what was exposed, how to claim complimentary identity-theft protection, and your options for potential legal action.
What Happened?
Hims & Hers, Inc. (Hims & Hers) identified suspicious activity in its third-party customer service platform on February 5, 2026. An internal investigation confirmed that from February 4 to February 7 unauthorized actors accessed or acquired copies of certain service tickets.
Breach window : February 4 – 7, 2026
Discovery date : February 5, 2026
Affected tickets reviewed : March 3, 2026 personal data confirmed
Consumer notice mailed : April 2, 2026
What Information Was Exposed?
The company’s review determined that the following personal details may have been present in the compromised tickets:
Name
Contact information (such as email address, phone number, or mailing address)
According to the notice, customer medical records and communications with healthcare providers were not impacted.
How Hims & Hers Responded
The telehealth provider states it:
Immediately secured the affected customer service platform
Launched a forensic investigation to determine scope
Conducted a comprehensive ticket-by-ticket review to identify impacted individuals
Notified federal law enforcement and relevant regulators
Is updating internal policies and procedures to reduce the likelihood of similar incidents
Is offering 12 months of complimentary credit monitoring and identity-restoration services through Cyberscout
Recommended Next Steps for Impacted Customers
Enroll in the free Cyberscout services using the instructions in your mailed notice.
Monitor bank, credit-card, and health-insurance statements for unfamiliar activity.
Obtain and review your free annual credit reports for inaccuracies.
Report any suspected fraud to your financial institutions and the appropriate authorities.
Key Dates at a Glance
Breach period: February 4 – 7, 2026
Discovery: February 5, 2026
Personal data confirmed: March 3, 2026
Notice mailed: April 2, 2026
Company Overview
Founded in 2017, Hims & Hers offers telehealth products and prescription services across the United States.
Headquarters: 2269 Chestnut St., #523, San Francisco, CA, United States
Industry: Telehealth
Ticker: NYSE: HIMS
Website: hims.com
Support: support.hims.com
Privacy Policy: hims.com/privacy-policy
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from Hims & Hers — what should I do?
Follow the enrollment instructions for the complimentary Cyberscout credit-monitoring service, review your financial accounts, and keep the notice for your records.
How do I submit a claim related to the Hims & Hers data breach?
Preserve your breach letter and any fraud evidence, then consult a qualified data-privacy attorney to discuss filing an individual or class-action claim.
Am I eligible to join a lawsuit against Hims & Hers?
Eligibility generally depends on whether your personal data was involved and whether you experienced losses. Speak with counsel to review your specific circumstances.
What information did the Hims & Hers breach expose?
The incident potentially exposed names and contact information contained in certain customer-service tickets. Medical records and provider communications were not involved.
Did Hims & Hers offer credit monitoring, and for how long?
Yes. The company is providing 12 months of complimentary credit-monitoring and identity-restoration services through Cyberscout.
How many people were affected by the Hims & Hers breach?
As of the April 2, 2026 notice, Hims & Hers has not publicly disclosed the total number of impacted individuals.
How can I get the official breach notice (PDF) for Hims & Hers?
You can download the full notice directly from the California Attorney General site using the button above.
Attorney Advertising. Prior results do not guarantee a similar outcome.
