cyber.hendryadrian.com
Cyber Attack & Data Breach · bleepingcomputer.com

Hims & Hers Reports Unauthorized Access to Zendesk Support Tickets

· Original article ↗

Summary

Hims & Hers says attackers accessed or acquired Zendesk support tickets without authorization from February 4–7, 2026. Tickets may contain personal information; the company says medical records and doctor communications were not compromised.

Key points

  • Hims & Hers says certain customer support tickets were accessed or acquired without authorization between February 4 and 7, 2026.
  • The tickets may have contained names, contact details, and other information related to support requests.
  • The company says medical records and communications with doctors were not compromised.
  • BleepingComputer reports that ShinyHunters carried out the breach using an Okta SSO account to access the company's Zendesk instance; the article does not provide independent technical evidence for that attribution.
  • Hims & Hers is offering affected individuals 12 months of credit monitoring and advises them to watch for phishing and review account statements and credit reports.

Article Details

Victim Organization
Hims & Hers, Inc.
Incident Type
Unauthorized access to and acquisition of customer-support tickets through the company's third-party Zendesk platform, reportedly using a compromised Okta SSO account.
Incident Date
2026-02-04
Data Types Exposed
  • Names
  • Contact information
  • Other unspecified information related to support requests
Affected Records
Millions of support tickets were reportedly stolen; the number of affected customers was not disclosed.
Operational Impact
The company secured its customer-service platform and investigated. It stated that no medical records or doctor communications were compromised.
Ransom Or Extortion
BleepingComputer reported that the ShinyHunters extortion gang conducted the breach. No ransom demand or payment was reported.
Claim Status
confirmed

MITRE ATT&CK

T1078.004 · Cloud AccountsThe reported attackers used a compromised Okta SSO account to access the Zendesk instance.

Threat Actors

ShinyHuntersBleepingComputer reported that ShinyHunters conducted the breach; the company did not publicly provide further details confirming the group's involvement.

Vendors

OktaInvestigators and reporting link the incident to the ShinyHunters group using compromised Okta SSO accounts to access Zendesk.ZendeskInvestigators and reporting link the incident to the ShinyHunters group using compromised Okta SSO accounts to access Zendesk.

Products

Okta SSOInvestigators and reporting link the incident to the ShinyHunters group using compromised Okta SSO accounts to access Zendesk.ZendeskInvestigators and reporting link the incident to the ShinyHunters group using compromised Okta SSO accounts to access Zendesk.

Countries

United StatesIt is one of the most successful U.S. brands in the online pharmacy and telehealth space, with strong marketing presence, and annual revenues close to $1 billion.

Industries

HealthcareHims & Hers is an American telehealth company specializing in the direct-to-consumer healthcare space, providing subscription-based treatments for hair loss, ED, mental health, skincare, weight loss, and otherTelehealthTelehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform.

Related Articles