Support platform breach exposes Hims & Hers customer data

Hims & Hers disclosed that attackers accessed its third-party customer service platform (Zendesk) between Feb 4–7, exposing customer support tickets that may include names, contact information, and support histories; reporting links the intrusion to the ShinyHunters extortion group which reportedly used social-engineering to compromise Okta SSO accounts as part of a broader campaign affecting multiple Zendesk instances. Customers are being offered 12 months of credit monitoring and advised to watch for targeted phishing, extortion, and scam attempts that could arise from the stolen records.