Published
July 6, 2026
People use telehealth because it feels private. These suits are about a February 2026 breach of the Hims & Hers support system — and the roughly two-month wait before customers were told. There is nothing to claim yet.
Allegations Only · No Settlement Yet
This article describes class action complaints. The statements below are unproven allegations. Hims & Hers has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal or medical advice.
What Is This About?
Hims & Hers, the telehealth company known for prescribing and shipping medications for hair loss, weight loss, sexual health, and mental health, is facing proposed class action litigation over a February 2026 data breach. Two suits have been filed in California federal court: one led by plaintiff Brandon Hoagland-Sweeney against Hims, and a nearly identical one led by plaintiff Julie Dolphin against Hims & Hers, Inc.According to the company's disclosures and reporting on the incident, Hims & Hers identified suspicious activity on February 5, 2026 involving Zendesk, the third-party platform it uses for customer support. The company says unauthorized users accessed certain customer-service tickets between February 4 and February 7, 2026. Hims & Hers has stated that the incident did not include medical records or communications with healthcare providers. Hims & Hers has not been found liable, and the claims remain unproven.
Status
Complaints Filed
Two proposed class actions · N.D. Cal. · No. 3:26-cv-03157 (Hims) & No. 3:26-cv-03077 (Hims & Hers)
Incident
Zendesk support tickets accessed Feb 4–7, 2026
Company says no medical records or provider communications involved; notice sent ~April 2026
Can I Claim?
No — nothing to claim yet
No settlement, no fund, no claim form at this stage
What the Lawsuits Allege
The complaints allege that Hims & Hers failed to implement reasonable and adequate data-security measures to protect the personal information customers shared with it, and that its handling of the incident was negligent. A central theme is timing: the suits allege that although the company detected the intrusion in early February 2026, it did not notify affected people until around April 2026 — leaving them, according to the complaints, unable to take timely steps to protect themselves.The suits also emphasize the sensitivity of the context. Even though the company says medical records were not involved, the plaintiffs allege the exposed customer-support data could include details such as names, dates of birth, and health-related information tied to a telehealth account — the kind of information customers reasonably expect a health-adjacent company to guard carefully. As with any complaint, these are allegations only; no court has found that Hims & Hers violated the law, and the company may dispute the plaintiffs' characterization of what was exposed.
Is There a Hims & Hers Settlement Yet?
No. This is litigation, not a settlement.That means there is no settlement fund, no claim form, no payout, and no deadline to act — and customers do not need to do anything at this stage. The filing of a complaint is the start of a case, not the end. Hims & Hers has not been found liable simply because lawsuits were filed. If the cases are ever resolved through a settlement, or a class is certified, a formal claims process with its own eligibility rules and deadlines would be announced separately.
What Hims & Hers Customers Can Do Now
• Watch for an official breach notice from Hims & Hers describing what was exposed for you.• Be alert to phishing emails, texts, or calls referencing your Hims or Hers account or orders.
• Monitor your financial accounts, and consider a fraud alert or credit freeze if sensitive data was involved for you.
• Keep any breach notice in case a settlement or certified class later opens a claims process.
These steps are free and do not depend on the lawsuits. For breach settlements that are open and claimable now, see OCA's data breach settlements tracker.
Frequently Asked Questions
Is there a Hims & Hers data breach settlement yet?
No. The cases are proposed class actions, not settlements. There is no fund, no claim form, and no deadline. Hims & Hers has not been found liable.Were medical records exposed?
Hims & Hers has said the breach did not include medical records or provider communications and involved customer-support tickets on Zendesk. The lawsuits allege that support-ticket data could still contain sensitive personal information. Read any notice you receive for details specific to you.Do I need to file a claim?
No. Because this is litigation and not a settlement, there is nothing to claim and no deadline. Keep any breach notice you receive. If a class is certified or a settlement is reached, a claims process and deadlines would be announced separately.Sources
• TechCrunch — "Telehealth giant Hims & Hers says its customer support system was hacked": TechCrunch• Law360 — "Hims Didn't Protect Customer Data From Hackers, Suit Says": Law360
• The HIPAA Journal — "Telehealth giant Hims & Hers announces data breach": HIPAA Journal
• U.S. District Court, Northern District of California — dockets No. 3:26-cv-03157 and No. 3:26-cv-03077, via CourtListener: CourtListener Docket Search
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
For more class actions keep scrolling below.
Status
Complaints Filed — Proposed Class Actions
Case Titles
Hoagland-Sweeney v. Hims · Dolphin v. Hims & Hers, Inc.
Case Numbers
3:26-cv-03157 · 3:26-cv-03077
Court
U.S. District Court, Northern District of California
Incident
Zendesk support tickets accessed Feb 4–7, 2026 · notice ~April 2026
Official Court Page
CourtListener Docket
