Hims & Hers, a San Francisco-based telehealth company, was impacted by a “sophisticated social engineering attack” in February in which a hacker gained access to its third-party customer service platform, according to regulatory filings.
The firm said an unknown party gained unauthorized access to service tickets between Feb. 4 and Feb. 7, according to a filing Thursday with the California Attorney General’s office.
The company discovered the suspicious activity on Feb. 5, took steps to secure its customer service environment and launched an investigation.
“We have confirmed that our electronic medical record and communications with healthcare providers on our platform were not accessed,” a spokesperson for Hims & Hers told Cybersecurity Dive. “Third-party access was limited to our customer service software platform, and data accessed primarily included customer names and email addresses.”
The firm, which has about 2.5 million subscribers, is a major provider of health treatments and wellness products. Just last month, the company announced an agreement with Novo Nordisk to offer FDA-approved weight-loss medications with medical support.
Customer medical records were not accessed during the attack, nor were any communications with healthcare providers on the platform, according to the filing with the California AG.
The company has notified law enforcement and is reviewing its internal policies and procedures to reduce the likelihood of a similar incident happening in the future, according to the filing.
The company confirmed that the social engineering attack targeted two employees, according to information disclosed in the company’s Feb. 22 10-K filing with the Securities and Exchange Commission.
According to the report, the hackers may have gained access to some treatment information for certain customers who contacted the company’s customer service department through the online platform between February 2025 and February 2026.
Hims & Hers officials said in the filing that they did not believe the incident would have a material impact on the company’s financial performance.
