Ultrahuman says hackers accessed customers’ wellness data via internal tool

Ultrahuman disclosed that on March 27 attackers used credentials harvested from a malware-infected employee laptop to access an internal analytics system and view wellness data for roughly 0.1% of its users (~700 customers). The company detected the incident within hours, took the affected system offline, revoked access, said no passwords or payment data were accessed, and is notifying regulators while investigating whether any data was exfiltrated.