Hims & Hers says limited data stolen in social engineering attack.

This article focuses on a data breach experienced by Hims & Hers, a San Francisco-based telehealth company, resulting from a sophisticated social engineering attack in February. The breach involved unauthorized access to the company’s third-party customer service platform, primarily exposing customer names and email addresses, while electronic medical records and communications with healthcare providers remained secure. The attack targeted two employees and may have allowed access to some treatment information for customers who contacted customer service between February 2025 and February 2026. Hims & Hers has notified law enforcement, is reviewing its internal policies, and does not anticipate a material financial impact from the incident. [Extracted from the article]