Hims Breach Exposes the Most Sensitive Kinds of PHI

Hims & Hers Health reported that a threat actor accessed customer support tickets on a third-party platform in early February, exposing names, email addresses and unspecified medical/PHI for a limited set of customers; ShinyHunters claimed responsibility but the claim is unverified. Hims has begun notifying affected customers and offered a year of credit monitoring, while observers warn the exposure of highly sensitive telehealth information could enable embarrassing outcomes or extortion despite no public leak being found.