Breachesby GlyphHims & Hers
Disclosed Apr 2, 20263,385 affectedConfirmed
Hims & Hers support tickets stolen via Okta SSO and Zendesk compromise
Telehealth firm Hims & Hers told regulators that attackers used a compromised Okta SSO account to access its Zendesk customer service platform from February 4 to 7, 2026, taking names, contact details and support ticket contents. Medical records were not involved.
What is known
| People affected | 3,385 (as reported by the organization) |
|---|---|
| Disclosed | Apr 2, 2026 |
| Discovered | Feb 5, 2026 |
| Happened | Feb 4, 2026 |
| Attack | Phishing |
| Data exposed | NamesEmailsPhone numbersMessagesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
["names","emails","phone","messages"] to ["names","emails","phone","messages","health"]by backfillSource
empty to organizationby backfillSource
empty to 3385by backfillSource
other to healthby seedSource
unknown to phishingby seedSource
[] to ["names","emails","phone","messages"]by seedSource
empty to 2026-02-05by seedSource
empty to Telehealth firm Hims & Hers told regulators that attackers used a compromised Okta SSO account to access its Zendesk customer service platform from February 4 to 7, 2026, taking names, contact details and support ticket contents. Medical reby seedSource
empty to Hims & Hers support tickets stolen via Okta SSO and Zendesk compromiseby seedSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.